ap-southeast-2.prod.iggsq.biz

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:bc:66:35:17:2d:05:ea:0e:02:82:11:42:e1:95:76 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ap-southeast-2.prod.iggsq.biz

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:bc:66:35:17:2d:05:ea:0e:02:82:11:42:e1:95:76
Serial Number (int): 14270504779298476866748573757082801526
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f5:5f:61:3d:42:97:08:ba:5e:43:b5:54:15:47:34:bc:00:7e:0d:8f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 71:dc:96:2a:4b:8d:54:fd:13:70:e7:a8:9c:8a:53:d1:a1:87:54:ce
Fingerprint (sha256): 00:2c:63:d1:fc:eb:31:57:2b:19:15:da:d7:a5:cc:a9:48:0b:b9:92:2b:49:28:95:36:5b:42:f1:0f:78:fd:c6

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate ap-southeast-2.prod.iggsq.biz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ap-southeast-2.prod.iggsq.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ap-southeast-2.prod.iggsq.biz
*.6vgny.ap-southeast-2.prod.iggsq.biz
qppdt.ap-southeast-2.prod.iggsq.biz
1tdvr.ap-southeast-2.prod.iggsq.biz

Other certificates including the domain name iggsq.biz

(limited to 100 certificates)
ses.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.iggsq.biz
ap-southeast-2.prod.iggsq.biz
ap-southeast-1.prod.migratedcanary.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
ses.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
ap-southeast-1.prod.iggsq.biz
ses.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
us-east-1.prod.iggsq.biz
ses.iggsq.biz
ap-southeast-2.prod.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
ses.iggsq.biz
ses.iggsq.biz
ap-southeast-2.prod.iggsq.biz
ses.iggsq.biz
iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.prod.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ses.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ses.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
ses.iggsq.biz
iggsq.biz
us-east-1.gamma.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
iggsq.biz
ap-southeast-2.prod.iggsq.biz
iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.prod.iggsq.biz
ap-southeast-1.prod.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-1.prod.migratedcanary.iggsq.biz
ap-southeast-1.prod.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
ap-southeast-1.prod.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.prod.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
ses.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
ap-southeast-2.prod.iggsq.biz
ap-southeast-1.prod.iggsq.biz
iggsq.biz
us-east-1.prod.iggsq.biz
ap-southeast-2.prod.migratedcanary.iggsq.biz
ap-southeast-1.prod.iggsq.biz
ap-southeast-1.prod.migratedcanary.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
ap-southeast-1.prod.iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.prod.iggsq.biz
ses.iggsq.biz
us-east-1.gamma.migratedcanary.iggsq.biz
us-east-1.gamma.iggsq.biz
us-east-1.prod.iggsq.biz
ap-southeast-2.prod.iggsq.biz
iggsq.biz
ap-southeast-2.prod.iggsq.biz
us-east-1.prod.migratedcanary.iggsq.biz

Certificate

The complete raw certificate details for ap-southeast-2.prod.iggsq.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/sTvjQW9g0vhxaQLufLJ
n8Jfw86XMQKpMPN0Z4uCrpr1Rf4IsYTfaka74PeDCifEPj0BDblnsc+RaH0YqVvm
vc02MJFQbLRPY5iOBObcs/qvNEdfWmJnoK33w8BoKDyKE+LldI+ARdNtjEjM8PC5
5Ws+z5HeXuoXFXDoJRvD/5Ai+LzP1YdTg/Ehr17yirjkBD5fgztAMEw2DS4zYlkU
H32m+SVnR18VB3eLAiH4E75kvJ15LSNWiSwsBlXwAghfA0tBm79Sb8y5k4JTi+Gk
in3cD5UHQI7kYFwKxDn+yan22EoJlcQRwhA/+V1CWouGwP4jRzTXVb6IayP6h0h7
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14270504779298476866748573757082801526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ap-southeast-2.prod.iggsq.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32161642096962575962088333383957563470937718133977581947040776992955611737305973106059680442450698965128733429957810679664018874930634758870766794313212294369343520229401412218674018211377752216302325116616209641682569956482540756005348630109094183879038808588674228233423054654358559069576361187029196814594256917542462803881896567311763386904546690990549400154604135491466252548932974904169712590787847634744726503599740761691450240605448910961759401118132369622107323297052560827595911981793399265572713755632065206849866757830269633542309833232270909916444530515771737294736083504405997031479573620783371824691981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f55f613d429708ba5e43b554154734bc007e0d8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-southeast-2.prod.iggsq.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6vgny.ap-southeast-2.prod.iggsq.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qppdt.ap-southeast-2.prod.iggsq.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1tdvr.ap-southeast-2.prod.iggsq.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0038ec987d84950577b5c00390f0b661ed69770ff757b4dcce65fdd68fe785c8cdad01389ed6e7ef3f6d1b65103e613740848b6e99509e5e3cca615a8054badb52defa90904212012cd2853a05fadde2bcc5902bdc00901f718cb3c33b032bc589fd2f4b36b4e51f8bdc3467dde5dee46603cc2f9e583a0ca5450bebecd1dd5bffcb0004381d646ecfe090da319229661b4370a019aedfd6bf40b0254cc543a2f427cd02cb2643d7515ecae6c9ba01b1b228ab75cea0386c2a3113db3c438911646fcd06617adf347368ae6bc00ccc09ef62415f63557ce5f456ca265c10a8adfff5ad96f53a657b368cbe41e4f313adeca0639176141b8ab8f573043288dd09f0