static.showtime8-sbx.dht.live

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:59:d5:17:d6:c0:08:0c:42:60:c0:a2:87:e0:db:85 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=static.showtime8-sbx.dht.live

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:59:d5:17:d6:c0:08:0c:42:60:c0:a2:87:e0:db:85
Serial Number (int): 1795664458149775029932766608503135109
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 38:2f:e1:21:74:9f:9c:b3:74:b7:16:0a:40:37:c6:f8:b7:85:6f:e3
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 82:ed:e7:c7:4e:ad:c1:a5:5f:a3:9f:08:54:34:20:29:ff:94:53:64
Fingerprint (sha256): 00:c8:61:5b:a3:41:3e:b1:16:59:a7:3d:0c:22:da:b5:89:0d:97:48:a3:01:c8:cf:3a:dc:a7:03:56:ba:5d:f5

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate static.showtime8-sbx.dht.live

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static.showtime8-sbx.dht.live

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static.showtime8-sbx.dht.live

Other certificates including the domain name dht.live

(limited to 100 certificates)
test-iot-cms-a.machine-services-perf-stg.dht.live
static.showtime7-sbx.dht.live
sc-1761-survey-api.honeybadgers-sbx.dht.live
amr-prod-overflow-a.prod-messaging-prd.dht.live
green-mcs-d.messaging2-amr-prd.dht.live
static.showtime8-sbx.dht.live
green-iot-avx-a.airview-messaging-stg.dht.live
sc-2061-werewolf-api.honeybadgers-sbx.dht.live
avw.airview0-dev.dht.live
blue-ace-a.machine-services-dev.dht.live
docs.sc-2377b-survey-api.honeybadgers-sbx.dht.live
sc-1457-scui.honeybadgers-sbx.dht.live
green-mcsmonaco-a.airview-messaging-qa.dht.live
green-iot-hub-c.messaging2-amr-prd.dht.live
support-api.showtime5-sbx.dht.live
api.airdba.atlas-eu-prd.dht.live
airview-apac-pre-prod.dht.live
fsg-dev3.airview-kona-dev.dht.live
sc-1761-werewolf-api.honeybadgers-sbx.dht.live
monaco.airview0-dev.dht.live
chat.dawn-us-prd.dht.live
external.showtime8-sbx.dht.live
sc-1769-survey-api.honeybadgers-sbx.dht.live
support-api.showtime8-sbx.dht.live
graphql.showtime9-sbx.dht.live
artifactory-edge-amr.artifactory-shared.dht.live
api.aloe-dev.dht.live
avx-mock-amr.showtime6-sbx.dht.live
avx-mock-apac.showtime7-sbx.dht.live
mobilequestionsui.sleep-concierge-qa.dht.live
docs.showtime8-sbx.dht.live
nexus-new.airview0-shared.dht.live
sc-1764-survey-api.honeybadgers-sbx.dht.live
*.mgmt.paas.dht.live
sc-2374-scui.honeybadgers-sbx.dht.live
api.airdba.atlas-eu-stg.dht.live
docs.showtime2-sbx.dht.live
avx-mock-apac.showtime8-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
external.showtime12-dev.dht.live
data-platform-mock.showtime8-sbx.dht.live
sc-2206-werewolf.honeybadgers-sbx.dht.live
cdk-multicare-aws.saas-sltc-sandbox-dev.dht.live
external.showtime4-sbx.dht.live
sc-1741-survey-api.honeybadgers-sbx.dht.live
green-iot-avx-d.airview-messaging-stg.dht.live
docs.showtime5-sbx.dht.live
peep-ws10.smart-coaching-dev.dht.live
test-lost-ebs-a.machine-services-perf-stg.dht.live
bitbucket.prod.dht.live
blue-avw-b.machine-services-dev.dht.live
sc-1470-mobilequestionsui.honeybadgers-sbx.dht.live
content-ws2.smart-coaching-dev.dht.live
graphql.showtime8-sbx.dht.live
amr-stg-mcs-c.airview-messaging-stg.dht.live
cdk-multicare-aws.saas-sltc-sandbox-dev.dht.live
blue-avw-c.machine-services-dev.dht.live
docs.sc-1760-survey-api.honeybadgers-sbx.dht.live
sc-2377-werewolf.honeybadgers-sbx.dht.live
graphql.showtime5-sbx.dht.live
green-mcspacific-a.messaging2-amr-prd.dht.live
external.myair-eu-dev.dht.live
docs.showtime7-sbx.dht.live
sc-1761-scui.honeybadgers-sbx.dht.live
support-api.showtime6-sbx.dht.live
peep-ws5.smart-coaching-dev.dht.live
green-iot-mds-h.messaging2-amr-stg.dht.live
api.showtime4-sbx.dht.live
docs.sc-2371-survey-api.honeybadgers-sbx.dht.live
sc-2037-mobilequestionsui.honeybadgers-sbx.dht.live
green-iot-mds-f.airview-messaging-stg.dht.live
api.hellosleep-prd.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
docs.sc-728-survey-api.honeybadgers-sbx.dht.live
sc-1764-scui.honeybadgers-sbx.dht.live
support.showtime5-sbx.dht.live
customer-service.saas-sltc-sandbox-dev.dht.live
nightowl.showtime6-sbx.dht.live
green-mcspacific-c.messaging2-amr-stg.dht.live
scui.sleep-concierge-prd.dht.live
amr-prod-dps-ebs-d.prod-messaging-prd.dht.live
api.showtime8-sbx.dht.live
sc-1457-werewolf-api.honeybadgers-sbx.dht.live
support.showtime4-sbx.dht.live
*.sre-dev-ave-qa.dht.live
sc-2066-scui.honeybadgers-sbx.dht.live
mcs2-dev.dht.live
support-api.showtime7-sbx.dht.live
amr-qa-avx-d.airview-messaging-qa.dht.live
avx-mock-amr.showtime14-dev.dht.live
green-dps-ebs-b.messaging2-amr-prd.dht.live
graphql.showtime8-sbx.dht.live
support-api.myair-eu-dev.dht.live
avx-mock-amr.showtime2-sbx.dht.live
data-platform-mock.showtime3-sbx.dht.live
data-platform-mock.myair-eu-dev.dht.live
content-ws4.smart-coaching-dev.dht.live
green-iot-mds-c.messaging2-amr-stg.dht.live
amr-qa-envoymq-hub.airview-messaging-qa.dht.live
*.airview-icm-dev.dht.live

Certificate

The complete raw certificate details for static.showtime8-sbx.dht.live in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLFNAKU9+63O9Ztc687N
SgKzrAZ164oVmJ58sXB6Z1twTsnYCoTU76wkWpWjDstDE410WTEmR/EaLUYztxSU
ErB6wSdmnpphLYHMEEkED3iOM4D+5ZentD8D1joCs+yd3Khy1OPEqMhJvN17rYMU
8WJtLPAesxjWkaoSBPNymtXslNumCdvJ8cCB0vi53mLQQFbJRk2oA+juovTNUVTm
6ql6D2FsKDqFtoMbFEwDc0z5VhF0Tp1PCBu429t4tX7PlRjoEZCP4xC1qtt6qtbi
AGFt36M447jMUl8J51OVMZEcHOCBGIaPPiVdR+fyPSYaHLlSWaXYF+qDGMCq+FpW
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1795664458149775029932766608503135109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static.showtime8-sbx.dht.live'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23315278392416911512769355783132957314761892399529806617127049566400990872843254876178161295905559065322822617317214505553953694436624221505375648951252726700993514513515790487637229403350633035946385105962826978497618031268483955927400749866590031943674675578605785555210672401611070836956921484152304568680518249940689105352275293999003219532675985988830242425541729788751398731394772056063437115037288988868987249262635719510033838108155996727145348312069998101316507131301202115635440020105669447113589830965429094613541277289184096634854947368103912902817240154555711177568556267219177888254696034685139547739697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							382fe121749f9cb374b7160a4037c6f8b7856fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.showtime8-sbx.dht.live'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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