About the localhost Certificate
This certificate with serial number f7:cd:03:67:f8:09:d2:d1 for localhost was issued on by itself (self-signed).
This Certificate has already expired and will cause a warning or error message. We have found some issues with the compliance of this certificate, they are be shown below. We hope this Certificate review for localhost provides you with the detailed information you were looking for.
We have identified some issues with this certificate:
- CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
- Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
- Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
- Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
- 1 DNS name(s) are bare public suffixes: localhost The domain SHOULD NOT have a bare public suffix (awslabs certlint)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)