aes.sso-uat.aws.blinxsolutions.systems

Issued by Amazon

About this certificate

This digital certificate with serial number 01:e4:65:d2:d5:ab:b7:43:bd:b9:45:0c:f3:8c:54:c7 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aes.sso-uat.aws.blinxsolutions.systems

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e4:65:d2:d5:ab:b7:43:bd:b9:45:0c:f3:8c:54:c7
Serial Number (int): 2515136906942852236202326916607005895
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d6:0e:03:4e:14:a7:19:2e:27:f7:56:52:35:0e:81:a6:b1:02:5a:4d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 50:10:a8:e1:02:fa:28:6f:a4:cc:44:c1:99:8b:9d:2b:2b:35:6d:0a
Fingerprint (sha256): 00:de:16:13:2f:6f:6e:d5:d1:54:f4:13:6b:c3:6d:00:b3:4b:34:d6:9c:b2:2a:c4:9b:9b:4d:31:9f:62:d7:f2

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aes.sso-uat.aws.blinxsolutions.systems

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aes.sso-uat.aws.blinxsolutions.systems

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aes.sso-uat.aws.blinxsolutions.systems

Other certificates including the domain name blinxsolutions.systems

(limited to 100 certificates)
sf.acu4.aws.blinxsolutions.systems
aes.bi-fe-dev.aws.blinxsolutions.systems
aes.sso-uat.aws.blinxsolutions.systems
se.crm-be-dev.aws.blinxsolutions.systems
webchatuat.aws.blinxsolutions.systems
aes.ch-be-dev.aws.blinxsolutions.systems
cp.pp.sbpl.aws.blinxsolutions.systems
sf.acu2.aws.blinxsolutions.systems
aes.bi.aws.blinxsolutions.systems
edb.dev.kpi.acurian.aws.blinxsolutions.systems
pre-prod.academy.aws.blinxsolutions.systems
aes.bi-fe-uat.aws.blinxsolutions.systems
aes.ch.aws.blinxsolutions.systems
aes.bi-fe-pp.aws.blinxsolutions.systems
aes.bi-be-dev.aws.blinxsolutions.systems
edb.kpi.acurian.aws.blinxsolutions.systems
aes.bi-uat.aws.blinxsolutions.systems
edb.dev.kpi.acurian.aws.blinxsolutions.systems
cp.pp.sbpl.aws.blinxsolutions.systems
aes.ch-be-pp.aws.blinxsolutions.systems
edf.kpi.acurian.aws.blinxsolutions.systems
dev.academy.aws.blinxsolutions.systems
dev.stobart.crm.aws.blinxsolutions.systems
sa.acu1.aws.blinxsolutions.systems
edb.qa.kpi.acurian.aws.blinxsolutions.systems
aes.bi-be-pp.aws.blinxsolutions.systems
screener.acurianhealth.com
aes.sso-fe-pp.aws.blinxsolutions.systems
aes-fe-prod.acurian.aws.blinxsolutions.systems
se.crm-be-uat.aws.blinxsolutions.systems
se.crm-fe-pp.aws.blinxsolutions.systems
aes.sso-be-pp.aws.blinxsolutions.systems
blinx.arch-fe-dev.aws.blinxsolutions.systems
prodbackcrm.aws.blinxsolutions.systems
prodbackcrm.aws.blinxsolutions.systems
sa.acu.aws.blinxsolutions.systems
aes.bi-be-dev.aws.blinxsolutions.systems
aes.sso-be-dev.aws.blinxsolutions.systems
cp.d.sbpl.aws.blinxsolutions.systems
uat.academy.aws.blinxsolutions.systems
aes.bi-fe-pp.aws.blinxsolutions.systems
aes.bi-be-uat.aws.blinxsolutions.systems
aes-sdt-uat.aws.blinxsolutions.systems
aes.bi-uat.aws.blinxsolutions.systems
*.aws.blinxsolutions.systems
aes.ch-uat.aws.blinxsolutions.systems
uatbackcrm.aws.blinxsolutions.systems
webchat.aes.aws.blinxsolutions.systems
aes.sso-be-pp.aws.blinxsolutions.systems
devbackcrm.aws.blinxsolutions.systems
se.bi-be-prod.aws.blinxsolutions.systems
aes.ch-uat.aws.blinxsolutions.systems
edb.kpi.acurian.aws.blinxsolutions.systems
sf.acu.aws.blinxsolutions.systems
edb.dev.kpi.acurian.aws.blinxsolutions.systems
aes.bi-fe-uat.aws.blinxsolutions.systems
aes.bi-fe-dev.aws.blinxsolutions.systems
aes.bi.aws.blinxsolutions.systems
se.crm-fe-uat.aws.blinxsolutions.systems
sa.acu4.aws.blinxsolutions.systems
aes.bi-be-dev.aws.blinxsolutions.systems
aes.sso-be-prod.aws.blinxsolutions.systems
aes.ch-fe-uat.aws.blinxsolutions.systems
aes.ms.ts-be-pp.aws.blinxsolutions.systems
aes.bi-be-uat.aws.blinxsolutions.systems
uat.academy.aws.blinxsolutions.systems
edf.kpi.acurian.aws.blinxsolutions.systems
aes.ms.ts-be-pp.aws.blinxsolutions.systems
sf.acu4.aws.blinxsolutions.systems
blinx.arch-be-dev.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems
sa.acurian.aws.blinxsolutions.systems
aes.sso-be-dev.aws.blinxsolutions.systems
aes.bi-fe-dev.aws.blinxsolutions.systems
aes.ch-be-uat.aws.blinxsolutions.systems
dashboard.dev.sth.aws.blinxsolutions.systems
aes.ms.ts-be-uat.aws.blinxsolutions.systems
aes.sso-fe-pp.aws.blinxsolutions.systems
aes.sso-fe-uat.aws.blinxsolutions.systems
dev.stobart.crm.aws.blinxsolutions.systems
edb.kpi.acurian.aws.blinxsolutions.systems
cp.d.sbpl.aws.blinxsolutions.systems
se.crm-be-dev.aws.blinxsolutions.systems
edb.qa.kpi.acurian.aws.blinxsolutions.systems
webchatpp.aws.blinxsolutions.systems
backend.ed.aws.blinxsolutions.systems
sf.acu.aws.blinxsolutions.systems
sa.acu4.aws.blinxsolutions.systems
screener.acurianhealth.com
aes.bi.aws.blinxsolutions.systems
cp.pp.sbpl.aws.blinxsolutions.systems
*.aws.blinxsolutions.systems
pp.stobart.crm.aws.blinxsolutions.systems
blinx.arch-fe-dev.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems
aes.ch-fe-dev.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems
aes.bi-be-pp.aws.blinxsolutions.systems
pp.stobart.crm.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems

Certificate

The complete raw certificate details for aes.sso-uat.aws.blinxsolutions.systems in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuKhlE7DZMRNU1IfQUd1
18WHVWdS6DlztV9PPRitaUaasm7WO6lHsYr6GAtxYYb2bsz5uTOaRlSDFiJvMNoL
a9CFIV/kZfh9cri/vMYJJppeVvo97PQjTO0aEDflA4ZnndpiUHNEuUMYcVHmvpKy
J2He9bwqcyIU+zlf+CklEUg2DtSyYMLybntUFlGXqhbkUFTC0nUTQ75g71hgSK8l
URqYswHzo71CDMqaI0cv+Ct8PJpmEr1K2b3mI/OtyFNy1cVgLwsljxzNNo2FCrUR
+zqzGg50CXrtNBikijnSffcRaU+/xopxbSLDgU7xVlXTLRxA5hFCzpdk6ilQ8swE
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2515136906942852236202326916607005895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aes.sso-uat.aws.blinxsolutions.systems'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25611893597901732098829120358328923542949836796353628675352887444719402003584277062138438775117816326558402532824168478130737594961717734542729555795453277855505243854737857281851246196968006455273920535814388197375081592774745009768972393512832406466779859201833620562562541213116750387489818943992897408961205665265021254377416479027063733465207420372199608401981964401332086559681823709867464044442710042808580989326901304269499655313423292423376417749018414585830678379353016484463602503148585811547800750108856102906071560825287289414713451619373131939098627516566856185410577884402380538487646125465618933875907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d60e034e14a7192e27f75652350e81a6b1025a4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.sso-uat.aws.blinxsolutions.systems'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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