Certificate for Kubernetes Ingress Controller Fake Certificate Issued to Acme Co

Certificate is witin its validity period

Issued by itself (self-signed)

About the Kubernetes Ingress Controller Fake Certificate Certificate

This certificate with serial number 6f:0b:29:61:2c:54:3f:77:a7:09:3a:01:35:d5:52:f0 for Kubernetes Ingress Controller Fake Certificate was issued on by Acme Co.

This Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this Certificate review for Kubernetes Ingress Controller Fake Certificate provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Missing common name, 'Kubernetes Ingress Controller Fake Certificate' The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Acme Co

Organization: Acme Co

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 6f:0b:29:61:2c:54:3f:77:a7:09:3a:01:35:d5:52:f0
Serial Number (int): 147602262075214248515638540251453281008
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier:
Authority Key Identifier:

Fingerprint (SHA-1): 25:23:ba:67:5f:44:0d:b4:fb:1c:3e:74:23:8e:cf:37:92:97:7a:7c
Fingerprint (SHA-256): 0a:3f:47:2b:85:30:00:f1:1a:67:97:e1:96:46:4f:06:39:c3:04:8e:a3:f4:be:d6:96:5e:89:a9:e8:78:05:6e


Revocation Information


Check the revocation status for certificate Kubernetes Ingress Controller Fake Certificate
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for Kubernetes Ingress Controller Fake Certificate

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Extensions
4
CA Certificate
This is not a CA certificate

Subject Alternative Names

ingress.local

X.509 Certificate

The complete raw X.509 certificate details for Kubernetes Ingress Controller Fake Certificate in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5s2u5lW+qE0KT6T3xIkK
v3pRyAOptNSWiMgqHrOT+4eixzrTRIwFGXzhxkw/mWII/ZeznNj5NXqT2XmC4VUw
Q7k6TZCdy7TzrBFXrpVSWpsPnJ2LDgqBiwCKl25Do2lPUT8Loy2yJPvDW72wjOEz
EJtdj3PVZL9sJi+btYKJ0hi+YCirXr6MNB5uw4rkh8gFVAW4kjWMYenhbu4+HgG4
2dmVj3bt567VLpDBr7ykBzGT/njWur2P7MErYkSfHDbKGmZPPZ9yFz9OLGhEdJxE
uEoH75EEZw53qIcIbjdYzYHCcme2jFqU63RUMnnhbfW+j8kkWC7g/iq6d601XvKq
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147602262075214248515638540251453281008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acme Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kubernetes Ingress Controller Fake Certificate'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-30 12:45:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-06-30 12:45:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acme Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kubernetes Ingress Controller Fake Certificate'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29136236309369924482816924630889239167593956708703784086083447476068841198919533292712053563870304877392175689056832031252387034110542698739953114653869110474744950055567588159293292478179290633758379686830219588781645873707257000224861606043324872545576058597919392676089330723723253821331510882667927335276530213609964714017682466678826229663622381116371902318522123127959369664870648876447841721663758395390105954340051650522236378268568581805516478210035641004349141266441687721958195454140451016436980280351652957414698258748012013335554638358749693557739858400876571780409626630114098018628680951633945182776041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingress.local'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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