payments-wpgsim-qa.npe.euw1.gw2.worldpay.io

Issued by Amazon

About this certificate

This digital certificate with serial number 06:74:44:a3:41:72:8f:f4:b2:8d:3f:8e:79:45:69:db was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=payments-wpgsim-qa.npe.euw1.gw2.worldpay.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:74:44:a3:41:72:8f:f4:b2:8d:3f:8e:79:45:69:db
Serial Number (int): 8579066548598096375110347225666251227
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5d:ce:b2:a9:7b:8f:ca:3d:4b:e9:11:58:ab:66:ee:98:21:51:a4:d1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e0:0c:07:12:a0:ea:00:0c:58:de:aa:3a:a4:b9:5a:0e:f4:09:2b:a1
Fingerprint (sha256): 00:7f:99:4a:47:6f:07:5f:85:66:86:12:05:b6:87:83:97:3e:10:05:33:00:28:07:27:9f:04:15:94:ef:81:fd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate payments-wpgsim-qa.npe.euw1.gw2.worldpay.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for payments-wpgsim-qa.npe.euw1.gw2.worldpay.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

payments-wpgsim-qa.npe.euw1.gw2.worldpay.io

Other certificates including the domain name worldpay.io

(limited to 100 certificates)
payments-wpgsim-preprod.preprod.euw1.gw2.worldpay.io
wpop-bg-vault.npe.euw1.gw2.worldpay.io
aquila-vault.preprod.euw1.gw2.worldpay.io
payments-wpgsim-qa.npe.euw1.gw2.worldpay.io
wpop-vault.npe.euw2.gw2.worldpay.io
payments-walletssim-preprod.preprod.euw1.gw2.worldpay.io
payments-walletssim-preprod.preprod.euw1.gw2.worldpay.io
testing-build-cicd-01.npe.euw1.gw2.worldpay.io
dns-vetting1-jeffg-noah.map.fastly.net
payments-sessionssim-preprod.preprod.euw1.gw2.worldpay.io
payments-wpgsim-preprod.preprod.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
cerberus-jenkins-nonprod-1.npe.euw1.gw2.worldpay.io
payments-sessionssim-qa.npe.euw1.gw2.worldpay.io
payments-wpgsim-qa.npe.euw1.gw2.worldpay.io
events-vault-dr.prod.euc1.gw2.worldpay.io
phoenix-vault-preprod.preprod.euc1.gw2.worldpay.io
prospective.shared.global.fastly.net
deji-cerberus-vault-dr.npe.euc1.gw2.worldpay.io
payments-wpgsim-qa.npe.euw1.gw2.worldpay.io
a2ca-binlookup.stage.worldpay.com
monoceros-build-ci2-2.npe.euw1.gw2.worldpay.io
wpop-jenkins-cicd.npe.euw1.gw2.worldpay.io
phoenix-build-test-0.npe.euw1.gw2.worldpay.io
wpop-bg-vault.npe.euw1.gw2.worldpay.io
payments-sessionssim-preprod.preprod.euw1.gw2.worldpay.io
payments-tokenssim-preprod.preprod.euw1.gw2.worldpay.io
aquila-vault.preprod.euw2.gw2.worldpay.io
tokens-tms-perf-downsim.preprod.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
payments-wpgsim-qa.npe.euw1.gw2.worldpay.io
payments-tokenssim-preprod.preprod.euw1.gw2.worldpay.io
payments-walletssim-preprod.preprod.euw1.gw2.worldpay.io
events-vault.preprod.euw1.gw2.worldpay.io
payments-sessionssim-preprod.preprod.euw1.gw2.worldpay.io
payments-tokenssim-preprod.preprod.euw1.gw2.worldpay.io
payments-walletssim-qa.npe.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
phoenix-vault-qa.npe.euw1.gw2.worldpay.io
payments-tokenssim-qa.npe.euw1.gw2.worldpay.io
aquila-npetest-build-ci-1.npe.euw1.gw2.worldpay.io
testing-build-cicd-01.npe.euw1.gw2.worldpay.io
payments-wpgsim-preprod.preprod.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
payments-wpgsim-qa.npe.euw1.gw2.worldpay.io
payments-wpgsim-preprod.preprod.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
browser-versions.npe.euw1.gw2.worldpay.io
*.euw1.services-live.scorpius.worldpay.io
phoenix-build-cicd-5.npe.euw1.gw2.worldpay.io
wp-citibank-sandbox-ssl.worldpay.io
payments-wpgsim-qa.npe.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
payments-wpgsim-qa.npe.euw1.gw2.worldpay.io
payments-tokenssim-preprod.preprod.euw1.gw2.worldpay.io
payments-walletssim-qa.npe.euw1.gw2.worldpay.io
tokens-performance-downsim.preprod.euw1.gw2.worldpay.io
phoenix-payments-minn-2.npe.euw1.gw2.worldpay.io
account-verifications.preprod.euw1.gw2.worldpay.io
*.akamai.eu-central-1-rg8mt.stage.msp.worldpay.io
payments-walletssim-preprod.preprod.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
payments-wpgsim-preprod.preprod.euw1.gw2.worldpay.io
aquila-npetest-build-ci-1.npe.euw1.gw2.worldpay.io
payments-walletssim-qa.npe.euw1.gw2.worldpay.io
payments-walletssim-preprod.preprod.euw1.gw2.worldpay.io
orion-wpop-cicd-1.npe.euw1.gw2.worldpay.io
payments-tokenssim-qa.npe.euw1.gw2.worldpay.io
payments-wpgsim-preprod.preprod.euw1.gw2.worldpay.io
payments-sessionssim-preprod.preprod.euw1.gw2.worldpay.io
payments-sessionssim-preprod.preprod.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
payments-sessionssim-preprod.preprod.euw1.gw2.worldpay.io
payments-sessionssim-preprod.preprod.euw1.gw2.worldpay.io
payments-wpgsim-preprod.preprod.euw1.gw2.worldpay.io
aquila-vault-dr.npe.euc1.gw2.worldpay.io
payments-walletssim-qa.npe.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
*.euw1.st.chamaeleon.worldpay.io
dns-vetting1-jeffg-noah.map.fastly.net
scorpius-mobwal-cicd-1.prod.euw1.gw2.worldpay.io
payments-tokenssim-qa.npe.euw1.gw2.worldpay.io
monoceros-vault-dr.npe.euc1.gw2.worldpay.io
preprod.devhub.worldpay.io
prospective.shared.global.fastly.net
phoenix-vault.npe.euw1.gw2.worldpay.io
tokens-performance-downsim.preprod.euw1.gw2.worldpay.io
wpg-simulator-test.npe.euw1.gw2.worldpay.io
testing-build-cicd-02.npe.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
scorpius-mobwal-cicd-preprod-1.preprod.euw1.gw2.worldpay.io
payments-walletssim-preprod.preprod.euw1.gw2.worldpay.io
pactbroker.splitview.npe.euw1.gw2.worldpay.io
prospective.shared.global.fastly.net
tokens-tms-perf-downsim.preprod.euw1.gw2.worldpay.io
payments-sessionssim-qa.npe.euw1.gw2.worldpay.io
payments-sessionssim-preprod.preprod.euw1.gw2.worldpay.io

Certificate

The complete raw certificate details for payments-wpgsim-qa.npe.euw1.gw2.worldpay.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbO0RXOokkFakOmSrGLC
V9CmIIr7mMqNU/lPh2FUK90khKd+5ZOLekl15OHYY8sQilfJ4O70f2z3VagIK0FT
yLXHwmfxdBJ+yX004LBjqRPcbMqhz3+29kqj+LIqhaUW/4Yo4g0SmDDHOb/vt4EK
wk5gLLySikAr3wrSe553QDbKfld9sVYMY647rik1KWq2+sYrqIkqAoEHJ/t7+m3O
SBmgA3HpjZi4/o1wra9HEuKIToyiodyQoS/KKlWAT4pLQvT3gWmnse9RseDqox6E
KYjgq3QUq65nn67M2V1Od0yHG7NZH8QstF0iLYd9yavy1cZu4kh/PZnNsdZgg5LA
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8579066548598096375110347225666251227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'payments-wpgsim-qa.npe.euw1.gw2.worldpay.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21927842195371017539274537293052028136249169156180077425885421187423443752671032323870794864523245376918255044172309757220093674276334544136889649446552569581944062535591239852789327684732922497851756924358729624982632453797345646007871804428855239741838337762293107454073816003626939729091489839919734106116694348624621885049614524029607614109772480997859228466663433432358650174714463456329503338992807923106747345334729036533056437085060477845211359419887236605610745060103796398212725001605920400451742494632308728826434595600760413814944552320884858959206340205953584971581616561904822280289397222627811186098351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dceb2a97b8fca3d4be91158ab66ee982151a4d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments-wpgsim-qa.npe.euw1.gw2.worldpay.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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