*.knowre.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:ea:8d:3a:7d:b8:29:89:b4:01:c8:1c:d7:77:65:c1 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.knowre.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:ea:8d:3a:7d:b8:29:89:b4:01:c8:1c:d7:77:65:c1
Serial Number (int): 17168597868211945588461007392791291329
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 24:b7:d7:8c:fd:31:dc:e0:ca:25:02:97:53:ab:21:ff:a0:bb:9c:ee
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 10:0d:52:20:83:b6:8d:22:4a:11:9a:4a:05:d1:91:cc:5d:2f:f8:c2
Fingerprint (sha256): fe:8d:2e:36:41:a8:d6:4e:a7:41:90:f5:d0:ab:44:2e:2e:0b:7e:37:21:79:e2:41:0a:6e:2a:c1:2d:7b:d4:b8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.knowre.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.knowre.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.knowre.com
knowreapi.com
knowre.com
knowreinc.com
*.knowreapi.com
*.knowreinc.com
knowreapp.com
*.knowreapp.com

Other certificates including the domain name knowre.com

(limited to 100 certificates)
jroboticksclub.com
knowre.com
*.knowre.com
*.knowre.com
villaart.com.ar
coact.space
*.knowre.com
www.passmoresdiner.ca
*.knowre.com
local.knowre.com
*.knowre.com
surix.co
*.knowre.com
*.knowre.com
www.oxeye.ai
local.knowre.com
*.knowre.com
smashopoly.com
local.knowre.com
local.knowre.com
knowre.com
local.knowre.com
anusoft.in
about.knowre.com
local.knowre.com
u.knowre.com
local.knowre.com
*.knowre.com
knowre.com
local.knowre.com
*.knowre.com
knowre.com
u.knowre.com
local.knowre.com
*.knowre.com
*.knowre.com
villaart.com.ar
walletwatcher.app
*.knowre.com
protium.codes
local.knowre.com
jp-skt-purple-p.knowre.com
*.knowre.com
*.knowre.com
*.knowre.com
*.knowre.com
surix.co
*.knowre.com
www.arcadiaxr.com
*.knowre.com
*.knowre.com
daekyo.knowre.com
local.knowre.com
www.knowre.com
www.thegoodcrew.io
local.knowre.com
local.knowre.com
*.knowre.com
local.knowre.com
view.braingrafter.com
about.knowre.com
knowre.com
u.knowre.com
local.knowre.com
local.knowre.com
about.knowre.com
mbabazi.co
local.knowre.com
local.knowre.com
*.knowre.com
local.knowre.com
*.knowre.com
*.knowre.com
*.knowre.com
www.heelum.com
htoohtoo.me
www.knowre.com
stm.daekyo.com
*.knowre.com
about.knowre.com
www.knowre.com
local.knowre.com
local.knowre.com
local.knowre.com
www.thegoodcrew.io
www.publinet.com.ar
*.knowre.com
*.knowre.com
about.knowre.com
*.knowre.com
*.knowre.com
local.knowre.com
*.knowre.com
tastingplanner.com
local.knowre.com
local.knowre.com
local.knowre.com
*.knowre.com
knowre.com
*.knowre.com

Certificate

The complete raw certificate details for *.knowre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtnzWXzfH3OP0v/icCG0
yCvb206+lOxj3ZkPnglhz5qiJIAUM71t+4cGT9sHJfperxja1m+7RczoH3PHQ/6k
rMk0LpTPtj/kfJ4G80j+1bOexMiy/PzsXDEb+U3oQLb4hxkHsJGqVhPWlorS83pr
NDFP0gJWjX9BVsNO1v2d5BdAX0TVVSLTVTa6ZWqHA/2BKfODZwefWw/h+USn/ZBw
/42GRi+nfSCsaHBviEX0TUuCzOxxKN4IwxR8krU4A20+0vWzb97q6B41BzmGYN5p
zQg1AWUJwYZDE96m6c3hHg7KddiSMZMQjG50FKjomQ8NCAiTnYuxGOacavtxW+jv
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17168597868211945588461007392791291329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.knowre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24092753382297018810347768368203411683495783922825970134354077278582717808634373754544576784965732815517141380356221686477814607668160538999254338522335203091595382850198031526631517884853514437696247900594847426906336159944726229836989736049453324090294932004744406687782478935144456251303390752548535933351193184596061709003007826618464255104853828599870909347831060209320543934714441133833088483223246998731962626885874812101150930830788926139042584966993180598606295440093752252670884491897421859453386804490905069730616808637091290120254581754261310801572439775393842805921882337911243522361078524324037624655677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24b7d78cfd31dce0ca25029753ab21ffa0bb9cee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowreapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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