api.solargis.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:52:b4:d1:62:71:23:3c:5d:1d:51:34:59:90:5a:d8 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.solargis.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:b4:d1:62:71:23:3c:5d:1d:51:34:59:90:5a:d8
Serial Number (int): 5746347748420448115527019493095135960
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2b:3b:b9:12:fe:84:72:05:43:b8:42:65:6a:67:f7:ac:91:8c:96:89
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 21:63:2b:82:bd:fb:17:91:87:15:60:80:14:4e:24:74:2e:9e:d4:f3
Fingerprint (sha256): 00:cc:8b:3a:10:ba:81:1d:b1:ee:e9:75:02:18:b9:2f:68:f7:b4:8d:53:94:54:ba:d5:86:c5:af:c7:3c:46:dc

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate api.solargis.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.solargis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.solargis.com
api-test.solargis.com
api-dev.solargis.com

Other certificates including the domain name solargis.com

(limited to 100 certificates)
ssl83883.cloudflare.com
api.solargis.com
servicedesk.monaghancoco.ie
helpdesk.porvairfiltration.com
helpdesk.llyc.global
ssl83883.cloudflare.com
*.solargis.com
*.solargis.com
*.solargis.com
maildev.sg1.solargis.com
tiles.solargis.com
pomoc.lekam.pl
*.solargis.com
solargis.com
ssl256094.cloudflaressl.com
servicedesk.monaghancoco.ie
*.sdat.solargis.com
mobile-app.solargis.com
sgmon.solargis.com
solargis.com
*.solargis.com
api.solargis.com
pomoc.lekam.pl
ssl83883.cloudflare.com
ssl256092.cloudflaressl.com
sd.kormotech.com
ssl83883.cloudflare.com
ssl83883.cloudflare.com
ssl256094.cloudflaressl.com
ssl256094.cloudflaressl.com
helpdesk.nauit.lt
ssl256094.cloudflaressl.com
ssl83883.cloudflare.com
ssl83883.cloudflare.com
help.sch1584.ru
apps.solargis.com
*.solargis.com
tiles.solargis.com
payment.solargis.com
api.solargis.com
ssl83883.cloudflare.com
mobile-app.solargis.com
itdesk.solargis.com
api.solargis.com
ssl83883.cloudflare.com
apps.solargis.com
helpdesk.nauit.lt
ssl256094.cloudflaressl.com
*.solargis.com
files.sdat.solargis.com
ssl83883.cloudflare.com
helpdesk.aldaholding.com
servicedesk.monaghancoco.ie
ssl83883.cloudflare.com
itdesk.solargis.com
ssl83883.cloudflare.com
ssl256094.cloudflaressl.com
*.solargis.com
*.solargis.com
api.solargis.com
*.solargis.com
mobile-app.solargis.com
helpdesk.porvairfiltration.com
servicedesk.phmg.com
files.sdat.solargis.com
ssl83883.cloudflare.com
*.solargis.com
ssl83883.cloudflare.com
ssl256094.cloudflaressl.com
payment.solargis.com
payment.solargis.com
*.solargis.com
*.solargis.com
apps.solargis.com
tiles.solargis.com
itdesk.solargis.com
servicedesk.phmg.com
ssl256094.cloudflaressl.com

Certificate

The complete raw certificate details for api.solargis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrbS1tOZ26gD9nR6Xkwk
iDcysrIcECfPG/Z7OX71sptocCfxAdRDEQnROAIOntk0NflgBK95Jo8XsjcmIh6t
N7r86ih4RJaz7UDwDNfhGxNjjyLY6Wmfq44zBuZBh8JGxBYftUQ/CZpl3WLIeIhM
R+joQnleSZG36uCWITJCLEWZmh7tV/c57Lg4LnquKcFFdwKKLa82iJExP4atbjQL
jTu1mXfAeGZ0kUvmCOdAYnhNBU2PahEWxp7/5yciAByU/rbCkalUZkW1nF4UI7K9
l8q6UDSW8gCOIZy8uZxMSx8ChJ4T2e/QTIpc6zSzKrBZbS3MYvloWdzF4khdnsfC
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5746347748420448115527019493095135960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.solargis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19025899417454411545460573916663621668965571376779941853057142109668561423763470384785790587868220611025361286673049924689980103217883258571915376888031691093965519097383966020448832473925585130950650458954785210302985241128748056718475309946315039501692294094451945012076668155161671193919806050844488789649133307361306312594652193880832737369590302469500057994283301172259052671943885987732653469533893625592477236737849843899592042765580248305298161548339917973497108687760178515084488450434518338899831521960271677916932191891954327893477092864707097766532624379261515206155240892996364255764378656329886035591707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b3bb912fe84720543b842656a67f7ac918c9689
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.solargis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-test.solargis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.solargis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016f3575f25d0000040300483046022100fca73d99441f66d9d56db5a4a121722010ba01c83b9b188bed8357eb050c1aa8022100cf78d11c51e7975f4a49e2fc5a9eb323bf7bf3770d17d34cfd60d5f295ab3ca70076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016f3575f2f50000040300473045022100b6d3540dd659078c3f01a5d24a2ba4b3cfd20f5da7b573e6c196142c305df08202207b8bbb33f9166de8b0ce91d0803c8bfd181dcb356ec4b37372f77902a773858b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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