us-120738.logs.devatron.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:1c:22:29:ac:b7:14:0d:e0:18:9b:1e:19:63:d3:ca was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=us-120738.logs.devatron.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:1c:22:29:ac:b7:14:0d:e0:18:9b:1e:19:63:d3:ca
Serial Number (int): 4133761203127659851488516948181111754
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ac:f6:f6:15:0d:ae:6d:79:df:4d:c4:c0:67:67:1b:3f:a0:44:c5:5d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 4e:bd:a1:56:69:52:0e:7f:df:3d:c6:e7:90:e6:e1:47:0b:79:5a:bd
Fingerprint (sha256): 8e:f1:ec:cd:de:3b:fb:d5:7c:d3:a6:8a:30:f9:bc:23:38:07:f3:c4:e9:2d:ac:f5:45:b0:0b:ef:db:0f:0b:b6

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate us-120738.logs.devatron.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us-120738.logs.devatron.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

us-120738.logs.devatron.net
us-120738.15d.logs.devatron.net
druid.us-west-2-120738.15drd120738.logs.devatron.net
druid.us-west-2-120738.15d.logs.devatron.net
us-backup-120738.logs.devatron.net

Other certificates including the domain name devatron.net

(limited to 100 certificates)
grafana.devatron.net
*.k8s-dev-1.us-west-2.devatron.net
ingest.devatron.net
us-1612.logs.devatron.net
druid.us-east-1.003a.logs.devatron.net
ingest.devatron.net
us-150891.logs.devatron.net
us-120775.logs.devatron.net
*.jenkins.k8s-dev-1-1.us-west-2.devatron.net
druid.us-east-1.003a.logs.devatron.net
*.devatron.net
*.moshelitvin.k8s-dev-1-moshe.us-west-2.devatron.net
metrics.devatron.net
grafana.devatron.net
druid.us-west-2.003a.logs.devatron.net
ingest.devatron.net
ingest.1.devatron.net
us-120722.logs.devatron.net
metrics.devatron.net
ingest.devatron.net
us-150906.logs.devatron.net
us-1234.logs.devatron.net
us-120740.logs.devatron.net
grafana.1.metrics-dev-aaron.devatron.net
us-1234.logs.devatron.net
druid.us-west-2.003a.logs.devatron.net
druid.us-west-2.003a.logs.devatron.net
us-150846.logs.devatron.net
druid.us-east-1.003a.logs.devatron.net
druid.us-west-2.003a.logs.devatron.net
*.jenkins.k8s-dev-1.us-west-2.devatron.net
ingest.devatron.net
grafana.devatron.net
druid.us-west-2.003a.logs.devatron.net
*.devatron.net
*.jenkins.k8s-dev-1-1.us-west-2.devatron.net
*.devatron.net
grafana.1.devatron.net
*.moshelitvin.k8s-dev-1-1.us-west-2.devatron.net
druid.us-west-2.003a.logs.devatron.net
druid.us-east-1.003a.logs.devatron.net
ingest.devatron.net
grafana.devatron.net
metrics.devatron.net
status.devatron.net
druid.us-east-1.003a.logs.devatron.net
ingest.devatron.net
*.devatron.net
druid.us-east-1.003a.logs.devatron.net
ingest.1.devatron.net
ingest.devatron.net
metrics.devatron.net
grafana.devatron.net
us-120738.logs.devatron.net
druid.us-west-2.003a.logs.devatron.net
*.jenkins.k8s-dev-1-1.us-west-2.devatron.net
druid.us-west-2.003a.logs.devatron.net
grafana.metrics-dev-aaron.eu-west-1.devatron.net
ingest.metrics-dev-aaron.eu-west-1.devatron.net
druid.us-west-2.003a.logs.devatron.net
grafana.devatron.net
druid.us-west-2.003a.logs.devatron.net
metrics.devatron.net
us-3008.logs.devatron.net
druid.us-west-2.003a.logs.devatron.net
us-151208.logs.devatron.net
us-1234.logs.devatron.net
ingest.1.devatron.net
us-151319.logs.devatron.net
grafana.devatron.net
druid.us-east-1.003a.logs.devatron.net
metrics.eu-west-1.devatron.net
druid.us-west-2.003a.logs.devatron.net
*.jenkins.k8s-dev-1.us-west-2.devatron.net
grafana.devatron.net
*.jenkins.k8s-dev-1.us-west-2.devatron.net
druid.us-east-1.003a.logs.devatron.net
metrics.devatron.net
druid.us-west-2.003a.logs.devatron.net
grafana.devatron.net
us-4321.logs.devatron.net
us-120704.logs.devatron.net
ingest.devatron.net
druid.us-east-1.003a.logs.devatron.net
grafana.devatron.net
druid.us-west-2.003a.logs.devatron.net
grafana.devatron.net
us-150854.logs.devatron.net
druid.us-east-1.003b.logs.devatron.net
*.devatron.net

Certificate

The complete raw certificate details for us-120738.logs.devatron.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKYXqlfGzyTEw0KSdSCc
FG4G1UiWktUECDHC6Trjz2LUGJQDQ73SnYZ4jotLZ1FN0BIamQKj8VWxJEbL4eHy
MNgK6xE48kTGp8lDNiToO0Q0Ley8JE08MQs6eh8oOyJKYYXBkZ7uWThuzsBLb52u
t3BAaVebddsEYcEQTknRIx+c/N/9Ayn5Kwyn2XS2n18M07Erj6W2gBcTqueDF+8h
j884AaGKawdtHs8/OKvNspIeOKCtaD68IOXceLG85xRLUBRnaKS54WVTonW9H8Gu
zmdNCboaHyxOwxfc4drLnL7oplaIAbwvM57NgcrShGRqbN87zUYUltSRgs5KOrve
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4133761203127659851488516948181111754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us-120738.logs.devatron.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20784985250640513383713818436204228795594098055112398368218346483188583800442863122354297330604513577654480177128364429279104594989595863442215699607620353146964157777984486280935558182667397501773272339643899143169840044642793573628021509452528544598140991833573339523081303867622012206077370445043489814963873628661867294712763840141607474875292231548804170994096339775403354217237731602742890733945647838900069463314658774260440135932210968239361941550320412514736365578358003442239848641135527790237530355282976062893452007173213961081712804120776594521868629292877962505076785306136198466239607576881268176707239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acf6f6150dae6d79df4dc4c067671b3fa044c55d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-120738.logs.devatron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-120738.15d.logs.devatron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druid.us-west-2-120738.15drd120738.logs.devatron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druid.us-west-2-120738.15d.logs.devatron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-backup-120738.logs.devatron.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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