UNCLASSIFIED - NO CUI
Currently supported Big Bang Version is 2.51
Updating expired ingress certificates
Tested the changes by deploying big bang and access services via the istio public gateway and validating certificate health.
openssl x509 -noout -in fullchain.pem -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7a:02:cf:7d:ec:7a:89:19:fa:15:85:f8:e7:e2:4c:ca:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Nov 28 02:07:30 2022 GMT
Not After : Feb 26 02:07:29 2023 GMT
Subject: CN=*.bigbang.dev
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:41:5d:2e:a5:15:ba:9c:0c:54:79:55:4c:e2:86:
45:2c:84:9e:f2:5f:6b:3b:71:71:6a:50:3d:02:86:
49:ac:0e:74:fe:8a:06:9e:f7:18:3a:84:49:f3:f3:
72:5a:4e:be:18:02:a2:61:12:92:36:07:46:4b:71:
56:b8:90:c9:30
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
99:2E:E5:38:A8:82:62:AA:BF:D2:63:EF:C2:EE:27:CA:DF:8E:03:E3
X509v3 Authority Key Identifier:
keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
Authority Information Access:
OCSP - URI:http://r3.o.lencr.org
CA Issuers - URI:http://r3.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:*.bigbang.dev
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.44947.1.1.1
CPS: http://cps.letsencrypt.org
1.3.6.1.4.1.11129.2.4.2:
......u..>.$..M.u.9..X.l].B.z.5.....%........4:......F0D. u.XL...j...Q.....`A.'c...6!.k?.p. ..i.....}.,~..x.m..A,...)}.]6b...u.z2.T..-. .8.R....p2..M;.+.:W.R.R.....4;......F0D. e....{..*2.. 1.H......e.....%0.-. 6....HZ.<....~.P)..M.[.....G.!gE
Signature Algorithm: sha256WithRSAEncryption
b8:f7:e0:bd:e9:6d:ff:91:57:ed:95:64:b8:a5:83:31:d7:ca:
ff:bf:a6:11:49:3a:34:52:97:80:c0:0b:0b:80:18:fa:61:67:
f4:56:dd:c0:d1:9c:2b:59:02:17:52:2b:8b:8e:53:fc:b1:70:
2a:53:ad:a1:94:b3:df:3a:24:cd:2a:9b:a0:08:7b:15:bc:fe:
64:b5:84:9b:ef:eb:72:30:ed:34:2e:f8:d6:70:9f:85:10:0b:
43:7c:d3:5d:34:3f:7a:4a:3c:fc:aa:4c:6e:ba:49:3f:d4:f0:
6e:51:fb:f1:72:37:08:30:e5:f1:dc:53:98:ab:25:a5:f1:0d:
2d:46:1f:90:ad:5d:08:a5:2d:c7:29:01:f2:e5:d0:dc:08:db:
78:a0:8d:f0:c5:0f:30:32:2c:49:28:43:eb:db:ed:ce:3a:45:
20:82:b8:e1:d1:31:05:69:03:00:76:45:88:6f:e2:7f:7c:ae:
b4:07:22:ba:2a:41:91:a7:1b:24:cc:7c:fd:5e:c1:51:96:ea:
3d:a1:de:20:cc:3b:9e:9e:74:6e:c0:19:5a:b2:2c:37:9a:d0:
7e:3d:27:65:05:9b:82:4d:c1:a5:1a:ad:b3:0a:a9:3c:c9:a1:
c4:53:6a:d1:dd:ee:5b:e1:d5:3d:34:51:99:4b:7c:6c:2a:2f:
d9:4b:d8:f2
UNCLASSIFIED - NO CUI