locus-api.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 05:36:4a:75:4e:84:62:20:bf:6d:03:cb:7f:2d:1e:e0 was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=locus-api.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:36:4a:75:4e:84:62:20:bf:6d:03:cb:7f:2d:1e:e0Serial Number (int): 6928034201591016819257416046200299232
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 56:ca:ce:fa:b4:6b:99:1b:43:4f:0e:cc:15:0f:5d:f9:2a:21:2b:d6
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): b1:93:51:ee:e2:df:23:76:58:70:8d:18:f9:ff:7e:28:21:4d:f1:92
Fingerprint (sha256): be:6b:b0:5c:a7:8e:f5:81:2b:31:20:b9:82:fa:82:53:f0:6b:b3:6b:2e:a5:82:19:e0:21:6f:54:70:a8:83:24
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate locus-api.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for locus-api.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
locus-api.com
api.locus.in
api.locus.sh
*.locus-api.com
api.locus.in
api.locus.sh
*.locus-api.com
Other certificates including the domain name locus-api.com
(limited to 100 certificates)
*.1.ingka.locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
*.lily.1.ingka.locus-api.com
*.locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
*.lily.1.ingka.locus-api.com
locus-api.com
locus-api.com
*.1.ingka.locus-api.com
*.locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
*.lily.1.ingka.locus-api.com
*.locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
locus-api.com
*.lily.1.ingka.locus-api.com
locus-api.com
locus-api.com
*.1.ingka.locus-api.com
*.locus-api.com
locus-api.com
locus-api.com
Certificate
The complete raw certificate details for locus-api.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIQBTZKdU6EYiC/bQPLfy0e4DANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDMwNjAwMDAwMFoXDTI0MDQwMzIzNTk1OVowGDEW MBQGA1UEAxMNbG9jdXMtYXBpLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAJuCDRu+HEJLZthGshiXPjGl0yO6yy69bv6mVQR1VlC5wederHapDpUB /E6xIvVCwnt5IZFT8KeRiFyqslB1fS53QVJ69YyDe56AkPX4EinOnm/RdOJndTBy c3cXDVsJ3m3K5zpjb8QWGOPYSIsXsw+vM1TyHiWinBEYjp+qyDmPVn/P8RUE/uOs 9BN3W/VjXIg3Ai97VBNBXkU3DwLFEeWXmyDs/aPwmzN8iQ32dU0IfyXaH01IepcG DB0yKzGjFFv6MYmVyAxBCuK8O9VMAuITzUvE0FroEIl9QwEvmhFQsaQ0vyEsKwrZ HewaLx8ihj8H7q1I8rVwuZXyzPMsDvMCAwEAAaOCAxMwggMPMB8GA1UdIwQYMBaA FMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBRWys76tGuZG0NPDswVD135 KiEr1jBFBgNVHREEPjA8gg1sb2N1cy1hcGkuY29tggxhcGkubG9jdXMuaW6CDGFw aS5sb2N1cy5zaIIPKi5sb2N1cy1hcGkuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0 cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMBMGA1UdIAQM MAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDov L29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8v Y3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIw ADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUA7s3QZNXbGs7FXLedtM0TojKH Rny87N7DUUhZRnEftZsAAAGGtVaxTwAABAMARjBEAiAflfy6P28BbyRL3sSyMd9d J8ZBjwdwYU0qkQCQZiyEsQIgJoUljxSWyehMa9x0bMgCWSfCl1kDhiL5oAwxpKnw KR4AdgBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxrgBB6wXdytQAAAYa1VrFnAAAE AwBHMEUCIQCxLSvYqtSpaYM4LokZlT8isLgTwisnxSqath6f1Iq7cwIgX9CULn6Y dFWuzEBLuNQ2kPTUNqjsjMxgfxeMVyg33BAAdwBIsONr2qZHNA/lagL6nTDrHFIB y1bdLIHZu7+rOdiEcwAAAYa1VrE1AAAEAwBIMEYCIQCgdba3/mE2niosAysNHAtQ ixsSe24VumMCAJ/zYGenJQIhAPbsg1O+pLWb7wtwkA/T1wcOSqt5+00Ovsetz/ka /0UtMA0GCSqGSIb3DQEBCwUAA4IBAQAfJvkCiO5T9FX/KqmxMpObDEy1qM1s4ZqT h+IEaxudzzHh0xBfBsO609KQYS+W2RmgRIE1esXH+hfHf/Asg4MPZw+35JvhaxOm YKdlze2jZ1rYnHf3Ml1csjZkPJwBHzxMCMoQj8vtmPq7T9RPgMujCPUfpywpebm5 fmNHK6qoT3PWXJGPh1cBpUbom+RdDoJ65JeiU4u5lW/u+mcZGtGSVGG4k866Fw9x DlLcUU9yApFx74pz3cUBODe1A9cafJa1kLJJLb6LQkxCFLjvdMNv2h8Pzh6SMmtv jgrD3JgaxbHiIueh579f6CWU5DoyH/v/vQiOxpr+oW3AADJtwWP/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4ING74cQktm2EayGJc+ MaXTI7rLLr1u/qZVBHVWULnB516sdqkOlQH8TrEi9ULCe3khkVPwp5GIXKqyUHV9 LndBUnr1jIN7noCQ9fgSKc6eb9F04md1MHJzdxcNWwnebcrnOmNvxBYY49hIixez D68zVPIeJaKcERiOn6rIOY9Wf8/xFQT+46z0E3db9WNciDcCL3tUE0FeRTcPAsUR 5ZebIOz9o/CbM3yJDfZ1TQh/JdofTUh6lwYMHTIrMaMUW/oxiZXIDEEK4rw71UwC 4hPNS8TQWugQiX1DAS+aEVCxpDS/ISwrCtkd7BovHyKGPwfurUjytXC5lfLM8ywO 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6928034201591016819257416046200299232 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'locus-api.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19631067908893599158911738715982120651352951581470633839158088041091791991394410175103134628986698918181617982287808798211544084661354294579360744529103925495574392380440789381318832357377933757372785783563421453862977233814733371092044073723265529459827847458353289367466291698988466734878903116241025951557846586581652397622204403730008597623891324014204105404100255848237763237227729015595180083530968620299276575801950896873315097650660143986267277328542296385139300782469226462238364015341493374429909356930196795477737916361882637159228091675119762848750806801959612062444151252455913262957574042380952564141811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 56cacefab46b991b434f0ecc150f5df92a212bd6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locus-api.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.locus.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.locus.sh' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locus-api.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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