www.inkitt.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:a6:96:d1:47:2e:14:f3:e2:a4:42:a6:84:08:38:f2 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.inkitt.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:a6:96:d1:47:2e:14:f3:e2:a4:42:a6:84:08:38:f2
Serial Number (int): 10169576191166850959710352508512123122
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 53:58:c8:82:cf:46:ae:3c:53:dd:9a:a0:ce:06:8f:b5:d9:f3:31:be
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 19:97:db:1b:6a:b1:87:63:34:06:5e:98:04:59:0d:6d:92:6c:74:04
Fingerprint (sha256): e5:47:47:8c:2b:19:0a:69:cb:bb:aa:75:31:e3:33:e5:1e:0c:32:68:b7:15:82:07:eb:53:a5:35:0d:53:1f:da

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate www.inkitt.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.inkitt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.inkitt.com
inkitt.com

Other certificates including the domain name inkitt.com

(limited to 100 certificates)
*.inkitt.com
galatea-api.inkitt.com
nagrady.by
nagrady.by
persisch.de
www.riddlesaga.com
vantage-ira.solerabank.com
totoconnect.co.uk
sni.cloudflaressl.com
genrephile.com
vistaprintsandbox.thelevel.ai
*.inkitt.com
kibana.inkitt.com
literaryodyssey.com
*.inkitt.com
numero2.indefini.do
sni.cloudflaressl.com
mytechsite.co.uk
www.inkitt.com
www.inkitt.com
zabbix.mon.inkitt.com
apnetruck.com
gitlab.dev.inkitt.com
kibana.inkitt.com
redash.dev.inkitt.com
aclemens.de
swagger.inkitt.com
galatea-editor.inkitt.com
www.subsocial.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.inkitt.com
galatea-web.dev.inkitt.com
literaryodyssey.com
www.inkitt.com
sni.cloudflaressl.com
*.inkitt.com
www.colenet.eu
paej46.fr
kibana.inkitt.com
*.inkitt.com
flibra.gaiax-blockchain.com
aclemens.de
stable-diffusion-webui-gradio.inkitt.com
www.inkitt.com
redash.dev.inkitt.com
redash.dev.inkitt.com
sni.cloudflaressl.com
redash-dev.inkitt.com
areyoufree.xyz
www.fonduly.com
sni.cloudflaressl.com
gitlab.dev.inkitt.com
mahmudahsan.com
redash.dev.inkitt.com
gitlab.dev.inkitt.com
gitlab.dev.inkitt.com
admin.test.phnx.review
galatea-web.dev.inkitt.com
www.biculounge.com
edenparadisee.com
oceanlog.app
redash.dev.inkitt.com
paej46.fr
redash.dev.inkitt.com
view.smoky.no
redash.dev.inkitt.com
www.vdamarketing.co.za
gitlab.dev.inkitt.com
www.inkitt.com
www.ashleyandjack.com
kazcoin.net
persisch.de
www.a-zeroproduce.net
gitlab.dev.inkitt.com
redash.dev.inkitt.com
shelterbelt.sksis.ca
*.inkitt.com
bkudarnik.ru
hypnosis.atspsyapps.ru
www.morebettercheddar.com
cdn.inkitt.com
kindleebooks-wnyo.ebookbes.com
gitlab.dev.inkitt.com
galatea-api.inkitt.com
bytesfantastic.be
colt.inkitt.com
*.inkitt.com
www.neuronific.app
www.alkadome.co
ebptracker.newgen.co
www.inkitt.com
colt.inkitt.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
totoconnect.co.uk
galatea-api.inkitt.com
www.biculounge.com
redash.dev.inkitt.com

Certificate

The complete raw certificate details for www.inkitt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDC+KXl8qrrS25fvodA6
3MJfaxov1+D4QstbjSXvKJueQlzGwhnr+2+xMxnzZ9Xdwa/b9J8/LT7HvAaX9Rkk
6Y12rFKhiB1I6MvlH3nIm8CPpW1YB7gBUt1rUBmeTM4iT+7sDO0mNrbkQ52HOrlE
eEKm2bK/44MuT/7k7GnH8PxnJr8yqWpPjbCWQGrSs6ViYlj8OO3+vIsZBJXIKXMU
muU3q9CIee30Jy2AT52GNnHWAFAKCzl0SpSySZdphi+QCF+iJoRHdn8J/WkndK3I
bonq1oQJk/eZBuFKMIwZ6h1XzCfDfeScACUeLxiMMr4mnXlFSc98EDBnhLKgHx5h
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10169576191166850959710352508512123122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.inkitt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17192445455932580039958948909320855368188070628074161426944195361043474944339610557522073142455107335330358453063103695080997447391325232474404452981723726250343639929920116205685873318813342226467256307720465993026500373289563163930871431816730341439726771321424148069544229877611361597723365229857697511240232422235831962946255581290511098018923457580226469329665915393154561855261305651190682755309994617709981459389388599230962856293670310171608716083218150782037401952848371585773454018641305010171383634273717371551809974627742273242914919996080673706964630024924332557881598186323579169640541799303137856479583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5358c882cf46ae3c53dd9aa0ce068fb5d9f331be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkitt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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