streaming.us-east-1.skydrive.ellielabs.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:0e:10:e6:c6:88:b5:40:70:26:41:c5:34:de:23:70 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=streaming.us-east-1.skydrive.ellielabs.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:0e:10:e6:c6:88:b5:40:70:26:41:c5:34:de:23:70
Serial Number (int): 6719174937418405451943044116215898992
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 45:71:35:6f:4f:d4:27:18:ab:dc:30:0d:76:bb:f1:bf:9c:fe:a1:68
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): a2:9c:d5:23:3b:6f:68:d2:c0:dc:ca:54:ee:37:8e:1c:12:03:1f:02
Fingerprint (sha256): 00:97:5a:43:d2:7e:71:bc:0d:a9:22:2d:b4:02:e4:07:48:ff:e1:ab:24:4a:1f:05:8f:0e:18:c9:dc:a8:8f:d8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate streaming.us-east-1.skydrive.ellielabs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for streaming.us-east-1.skydrive.ellielabs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

streaming.us-east-1.skydrive.ellielabs.com

Other certificates including the domain name ellielabs.com

(limited to 100 certificates)
concept.processor.usermessaging.ellielabs.com
*.stg.ecrm.ellielabs.com
streaming.us-east-1.skydrive.ellielabs.com
dcss-api.datascience.ellielabs.com
dev-tfe.api.ellielabs.com
api-stl.stg.ecrm.ellielabs.com
customdomaintest.northstar.ellielabs.com
concept.exportimportsvc.ellielabs.com
uat.tpo.ellielabs.com
r2t.async-processor.ellielabs.com
mavent.com
api.partner.concept.epc2.ellielabs.com
beta.tpo.ellielabs.com
docs.qa.developer.ellielabs.com
*.northstar.ellielabs.com
vemdomain.northstar.ellielabs.com
r2t.epps.ellielabs.com
northstar.ellielabs.com
consul.us-east-1.accord.ellielabs.com
concept.processor.usermessaging.ellielabs.com
uat.tpo.ellielabs.com
viewer.ellielabs.com
concept2.token-service.ellielabs.com
api.ultron.stg.consumer-connect-platform.ellielabs.com
partner.ellielabs.com
api-batch.stg.ecrm.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
api-r2t.subscribe.notification.ellielabs.com
concept.consumer.efolderorchestration.ellielabs.com
api-stl.stg.ecrm.ellielabs.com
*.pfc.ellielabs.com
efolderorchestration.ellielabs.com
r2t.marshall-service.ellielabs.com
stg.enc-services-orchestrator-request-router.ellielabs.com
stg.api.activities.ellielabs.com
*.integration.epc.ellielabs.com
learningstore-api.datascience.ellielabs.com
consul.us-east-1.accord.ellielabs.com
partner.integration.epps.ellielabs.com
skydrive.ellielabs.com
streaming.us-east-1.internal.skydrive.ellielabs.com
docs.qa.developer.ellielabs.com
concept.streaming.us-east-1.skydrive.ellielabs.com
api.beacon.ellielabs.com
elliemae.com
custom.gelato.io
api-subscription.stg.ecrm.ellielabs.com
cdn.ellielabs.com
api.subscribe.notification.ellielabs.com
concept.processor.svc-bot.ellielabs.com
stg.html.dpsv2.ellielabs.com
concept.consumer.efolderorchestration.ellielabs.com
streaming.skydrive.ellielabs.com
*.token-service.ellielabs.com
bazar.concept.consumer-connect.ellielabs.com
stg.enc-services-orchestrator-response-router.ellielabs.com
stg.dmosconsumer.ellielabs.com
api-test.subscribe.notification.ellielabs.com
stg.chatprocessor.chat.ellielabs.com
consul.us-west-2.accord.ellielabs.com
*.api.ellielabs.com
*.uat.eds.ellielabs.com
custom.gelato.io
r2t.async-processor.ellielabs.com
stg.sob.ellielabs.com
concept.userprofile.ellielabs.com
docs2.int.developer.ellielabs.com
api.beacon.ellielabs.com
stg.workflowsvc.ellielabs.com
*.otp-service.ellielabs.com
dev3.api.ellielabs.com
*.idp.ellielabs.com
processor.svc-bot.ellielabs.com
streaming.us-west-2.internal.skydrive.ellielabs.com
api.concept.v2.drs.ellielabs.com
mlr.learningstore-api.datascience.ellielabs.com
docs.int.partner.ellielabs.com
cfx.workflow.ellielabs.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
concept.replay-taskmanager.dataplatform.ellielabs.com
docs.int.partner.ellielabs.com
svc-configurer.ellielabs.com
api.origin.stg.epc2.ellielabs.com
api.payment-subscription.stg.consumer-connect.ellielabs.com
int-tfe.api.ellielabs.com
r2t.async-processor.ellielabs.com
viewer.ellielabs.com
concept.us-east-1.dpsv2.ellielabs.com
concept.streaming.us-west-2.internal.skydrive.ellielabs.com
*.partner.ellielabs.com
api.beacon.ellielabs.com
*.concept1.datalake.ellielabs.com
concept.streaming.us-west-2.skydrive.ellielabs.com
test.svc-aggregator.rd.ellielabs.com
docs2.int.developer.ellielabs.com
*.idp.ellielabs.com
stg-west.graphservice.ellielabs.com
concept.utility.skydrive.ellielabs.com
concept.workflow.ellielabs.com

Certificate

The complete raw certificate details for streaming.us-east-1.skydrive.ellielabs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz9xF3x/up3FK0xugu4v
ZwPeW1BoaJQbH7/2Qf0X9m4RIGMeF6FBH7xW+3MmxwqiLr/hG9GU4bKRfKAnjcYf
amAovuS5eFYSMZzZJF8Lnj/SEYuquNknndXJOt7kbTLe2JN/jPYwvXvyNf+iMqQy
aGsskC0SKCQNvQZf8detUcZvWD/sIIpLy2xthig6T144VM+Lt4QJ1wRVQWZvWmUZ
Rqy8liNagps8bpawHZijUs9IY4N5U6AYKJQLfmYat+l/4sOE38PlWAk3eQpImmMj
3Sq5MbmZ4oWxaclP1bUqf6hq9f7/NDoSFcDX1MRpAM+FTQnhWgF4pV57MCCJ2CeH
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6719174937418405451943044116215898992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'streaming.us-east-1.skydrive.ellielabs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19093268349992219014143922355783877809135970501432267339648486172799538027264511879975428571021048269726729745186648842766869677150544653174520773650864425711165583279605173663591327637601293371563132977112947414200983581637257196656076058498041142096012359472082839334228646836828815728260515255378937109206401247628593529607414353157556519496600979219736793791421006816460631190765390100979006896591911589257122767352341065115123274463788425692084735030162859029654179588332786276279509511162803394664622223036147559331903482942805760228887314929362588777317909390022663666204929680718466709081435196729071162066791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4571356f4fd42718abdc300d76bbf1bf9cfea168
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streaming.us-east-1.skydrive.ellielabs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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