Certificate for Kubernetes Ingress Controller Fake Certificate Issued to Acme Co

Certificate is witin its validity period

Issued by itself (self-signed)

About the Kubernetes Ingress Controller Fake Certificate Certificate

This certificate with serial number 85:c8:ab:42:7e:ec:11:c0:8f:0a:8b:58:ac:a9:30:45 for Kubernetes Ingress Controller Fake Certificate was issued on by Acme Co.

This Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this Certificate review for Kubernetes Ingress Controller Fake Certificate provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Missing common name, 'Kubernetes Ingress Controller Fake Certificate' The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Acme Co

Organization: Acme Co

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 85:c8:ab:42:7e:ec:11:c0:8f:0a:8b:58:ac:a9:30:45
Serial Number (int): 177829256371482228562232020427917045829
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier:
Authority Key Identifier:

Fingerprint (SHA-1): 9f:dc:a0:e9:9e:6b:1c:e9:97:bc:b8:fb:7e:1c:27:2e:e3:78:f7:0c
Fingerprint (SHA-256): 98:9f:04:80:bb:65:18:07:77:14:8c:ef:29:cb:71:89:b8:15:2a:57:32:71:17:61:42:66:66:9f:4f:8c:f2:e4


Revocation Information


Check the revocation status for certificate Kubernetes Ingress Controller Fake Certificate
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for Kubernetes Ingress Controller Fake Certificate

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Extensions
4
CA Certificate
This is not a CA certificate

Subject Alternative Names

ingress.local

X.509 Certificate

The complete raw X.509 certificate details for Kubernetes Ingress Controller Fake Certificate in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueiDNPL1NIkei7opt9yg
B5cYU7Yw9oCsrSN/9soSSyyrjofL2upELo6op6FbcWmUTn2czhu/YspylJ9mNUpi
qJK3XyKzKAelVBe274ZVekUQ8kUHhsfQUKrbP6E1lXaS+4t6d4LdLrVweQVRdC+l
viX5YXDu9wKw9bSdEQOkdYMDWxBJVzKPm0rwGX9mMbZIuy6YhaktWsta+5860yBn
xHqBkwcxdAvakU3b8E9NoB1dZKJxjXmCbLUmtk/vFwodIUSnVo/eztHXoWaYr3Xw
Hk9LC83r0FOwK8Neqlq0GG7wOG4gnwLMzqccv/pJMppDwPvYHQnE/Ku0AY7pHyDQ
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 177829256371482228562232020427917045829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acme Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kubernetes Ingress Controller Fake Certificate'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-10 11:57:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-10 11:57:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acme Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kubernetes Ingress Controller Fake Certificate'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23468742618926020756827773151290103249789842294680640501316821060249940689959169001291053966695534237560846299554630588610033989621769550219210677107159858152936974120325270958404675303723659896394614531419461172716248806978939612425084288413926920359886042018494569119232345586716066076642372367163319534879771483306529867613324628279284532502001828735834193171459612757530675318590305252877800734006855355410254998192683132549665405697248842193534643632647492131790171970645886813664204281219379370386432538518855247539693415462109452692810307683454300703534900840612979171561729418105419367882501286461020320092383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingress.local'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0021ca26495e6435cc198b4103f6b31ba22387b09f3b814e417decf21b5f551028f90211bcc8f468ac2ffbc49a3c07cd72424e8be00c363424e68df08ce2476926c5628668f1e0c35f6660131678c3a255cb6aa79a186d6dfdd252e94b3d72fa12a02be7fdf5278b1d5970436cd872b55de87515339ff08abe6f6ee8cdc58dc1cbf87e501dd99575d1f739fa690a54c6b2f2febd4f7f9b963d13e69a60d7f492ce727e973cfe68c6831aee35d2ae585efd6d6b937888163136d59961fc1ef893c761abf141e61401e82dfb713c10d997495fc2e83bcda2ba091e8d962f760e32c13c4cc873b996004d5e6c02d1a9e87d55714e5fcde6fd1b48618514371802510f