avkn.co

Issued by Amazon

About this certificate

This digital certificate with serial number 08:34:6a:1f:b4:bd:c2:50:ec:b7:7c:ec:02:c3:d5:4e was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avkn.co

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:34:6a:1f:b4:bd:c2:50:ec:b7:7c:ec:02:c3:d5:4e
Serial Number (int): 10905975850350869418817165459066180942
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:4b:15:fa:8e:86:b6:ba:26:e8:74:df:bf:da:71:37:c8:ca:fe:cb
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 9d:25:5b:40:fe:9d:0f:99:3d:16:00:d0:c0:0f:d5:bc:d8:1f:29:57
Fingerprint (sha256): 98:0b:81:b5:73:8b:31:25:30:4d:c0:cc:20:c4:ba:7e:0d:d1:b9:45:5b:0d:fe:1e:f0:e8:97:e0:e0:f8:63:ea

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate avkn.co

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avkn.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avkn.co
*.api.avkn.co
*.avakin.com
*.avkn.co
*.avakin.life
*.lkwd.net
dev.avkn.co
*.intranet.avkn.co
*.dev.avkn.co

Other certificates including the domain name avkn.co

(limited to 100 certificates)
dev.avkn.co
dev.api.avkn.co
*.avkn.co
avkn.co
avakin.com
avkn.co
avakin.com
avakin.com
avkn.co
avkn.co
tapglue.avkn.co
avkn.co
*.int.prod.avkn.co
tapglue.avkn.co
avkn.co
avakin.com
tapglue.avkn.co
avakin.com
avkn.co
*.avkn.co
avkn.co
avkn.co
dev.avkn.co
avakin.com
*.avkn.co
*.lkwd.net
tapglue.avkn.co
tg.dev.avkn.co
*.avkn.co
avkn.co
avkn.co
avkn.co
avkn.co
avakin.com
*.avkn.co
tg.dev.avkn.co
avkn.co
dev.avkn.co
avkn.co
tapglue.avkn.co
*.avkn.co

Certificate

The complete raw certificate details for avkn.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN2x2vz7Oj7CevwyAgSt
MNJZHTg7mKkxdU+jPk22djWiUvR7QQNjG6TJa/iHsoMoySwU7Ar5xjghsc1bqaaZ
9yn8MhWAhaJ5yGbe/0hJVqRa6AbZ906H5TfESTbbt0+VvtyBqjKXuNgm38NqgPg8
b2lazQiSa5Gf3uGeCakV/Nzk/gr/2+HelrpjItTX5KnGTL0HCE5+2aXauTQk9z/1
pK6cQXi8Aa7jIzugQHjmrP3eJRM53dsNgta/XxpJYklcckCJbNQny6zTcc9J6KLR
oCo1A4IJhFL0OOyidEYJTG+fMArEO35diDRogWWiTGzRHcHTlsm0UmUQnIFCYrwv
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10905975850350869418817165459066180942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avkn.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23337169868345378468592030467899953164718064815243071439714247492096369884051551652010266460026485712070671269611139107597211582763471906526297877712075833530227785809550084185958869967476843385796505979038177479434395833044026216261657380517890767318581562501614068203788142545512414809421421671349209860567098285738205892508429124089538097237258369603609863544700066485092727149639598990500100969166011806572238145588204944536279009038698542617905211448058619880874262243161229406689455028851964592235715920377724971498804348500482915636027072902009495295772991061333190650305486103355386093953182634635953650282279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							934b15fa8e86b6ba26e874dfbfda7137c8cafecb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avkn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.avkn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avakin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avkn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avakin.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lkwd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.avkn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intranet.avkn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.avkn.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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