ap-southeast-2.prod.migratedcanary.iggsq.biz

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:92:0f:1e:a3:cf:d8:70:7e:a1:ee:e3:f0:48:6a:36 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ap-southeast-2.prod.migratedcanary.iggsq.biz

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:92:0f:1e:a3:cf:d8:70:7e:a1:ee:e3:f0:48:6a:36
Serial Number (int): 15379889958666415990553764665162754614
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 98:7e:db:76:01:0c:ee:48:c3:fd:cc:93:2a:48:ff:8d:4d:b2:73:ac
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ca:93:89:97:a4:be:4d:1a:8c:e1:99:7e:c3:28:ef:eb:f6:87:bc:a0
Fingerprint (sha256): 00:17:58:41:21:e0:22:2e:1f:8e:ab:9a:dc:b7:ae:9d:44:c6:38:e4:76:c6:68:12:19:88:64:5f:f2:ff:53:f1

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate ap-southeast-2.prod.migratedcanary.iggsq.biz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ap-southeast-2.prod.migratedcanary.iggsq.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ap-southeast-2.prod.migratedcanary.iggsq.biz
*.ddtqu.ap-southeast-2.prod.migratedcanary.iggsq.biz
i49ud.ap-southeast-2.prod.migratedcanary.iggsq.biz
d8mnf.ap-southeast-2.prod.migratedcanary.iggsq.biz

Other certificates including the domain name iggsq.biz

(limited to 100 certificates)
ses.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.iggsq.biz
ap-southeast-2.prod.iggsq.biz
ap-southeast-1.prod.migratedcanary.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
ses.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
ap-southeast-1.prod.iggsq.biz
ses.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
us-east-1.prod.iggsq.biz
ses.iggsq.biz
ap-southeast-2.prod.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
ses.iggsq.biz
ses.iggsq.biz
ap-southeast-2.prod.iggsq.biz
ses.iggsq.biz
iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.prod.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ses.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ses.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
ses.iggsq.biz
iggsq.biz
us-east-1.gamma.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
iggsq.biz
ap-southeast-2.prod.iggsq.biz
iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.iggsq.biz
ap-southeast-1.prod.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-1.prod.migratedcanary.iggsq.biz
ap-southeast-1.prod.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
ap-southeast-1.prod.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
ses.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-2.prod.iggsq.biz
ap-southeast-1.prod.iggsq.biz
iggsq.biz
us-east-1.prod.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
ap-southeast-1.prod.iggsq.biz
ap-southeast-1.prod.migratedcanary.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
ap-southeast-1.prod.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.prod.iggsq.biz
ses.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.prod.iggsq.biz
ap-southeast-2.prod.iggsq.biz
iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz

Certificate

The complete raw certificate details for ap-southeast-2.prod.migratedcanary.iggsq.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniNyy6Zxhq5yrjy6nQW+
QvsLxL3eSu96VS9pawjbzVE5GXICqEYL/TUMUUMCB2sS1zzLkJOdRqun0g+kZB1K
mNkiKgToJqkqYiIPFni3HHqofE9/xrrZ9c7YhYq54Ori+CJPMcgvJqDWOYaRc3Wk
9/JjoHnAal2p5HeUjin8pxKkYVgnf9hMAgL/LDEhqo+2CO6FUhieu8Nt2RXU3RLN
gIYisy2xy8cBmxRzBHJ3mHQzAcNA69uI6de6HR3je928AR6tEWJvJ+up3DGXUiwI
BNv6zoZoSeBvadCfumW5Eaq7E3qJ0K4QZF/2qjEf1NqNoR4DYOhY3Xc/pzMYmOnW
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15379889958666415990553764665162754614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ap-southeast-2.prod.migratedcanary.iggsq.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19963132452015551660129465217662447731891655491825983914868006600898333507646706332795865951994123218423415119310208840617752867740866746411076797574666776471086787497936002388366177967191120505572360997474670990521638319712116306682891209672232867339682733927199306367241332227725937200290175793105954619261686754852825372094544890207752748851781931868554838538827369481632328733115667930656725274461161541208947049310532127619534321207232010640382303671990052571438893649372712541184766134651640793726200396002494457256051945379107280701302048399653986569857550762798098368965820440924625895373102467789761452562089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							987edb76010cee48c3fdcc932a48ff8d4db273ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-southeast-2.prod.migratedcanary.iggsq.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddtqu.ap-southeast-2.prod.migratedcanary.iggsq.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i49ud.ap-southeast-2.prod.migratedcanary.iggsq.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd8mnf.ap-southeast-2.prod.migratedcanary.iggsq.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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