management.test-experience.test-connect.aveva.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:af:f1:68:17:e7:05:c0:f9:e8:10:fb:86:9d:88:07 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=management.test-experience.test-connect.aveva.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:af:f1:68:17:e7:05:c0:f9:e8:10:fb:86:9d:88:07
Serial Number (int): 10218144228578831743219621498715998215
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6f:2d:5b:eb:17:57:31:88:68:6c:93:b5:ac:d9:16:55:2b:2b:ee:2b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cc:39:92:89:11:c1:bc:9f:38:c2:35:fd:b9:49:5a:bb:09:b2:71:74
Fingerprint (sha256): 01:3e:bc:86:10:74:b8:97:d8:e7:77:2d:21:9d:44:08:1a:96:e6:73:a4:de:da:bb:13:dc:f1:ff:5c:cc:9d:94

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate management.test-experience.test-connect.aveva.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for management.test-experience.test-connect.aveva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

management.test-experience.test-connect.aveva.com

Other certificates including the domain name aveva.com

(limited to 100 certificates)
dev4.dashboard.dev-av.dev-connect.aveva.com
cdojam.import.dev-av.capdev-connect.aveva.com
ots.int-cep.connect.aveva.com
sjvcvxtr.alb.tr-av.connect.aveva.com
dev2.import.dev-av.capdev-connect.aveva.com
portal.services.test-connect.aveva.com
testrc.import.dev-av.dev-connect.aveva.com
techsale3.alb.demo-av.connect.aveva.com
internal.integrationstudio.capdev-connect.aveva.com
dev2.import.dev-av.dev-connect.aveva.com
mahtest.import.dev-av.capdev-connect.aveva.com
management.test-experience.test-connect.aveva.com
aimsec.api.report.preprod-av.connect.aveva.com
test.tpskc.r53.aveva.com
91287234589239034672357235790.dev-dbc.capdev-connect.aveva.com
demo.dev-connect.aveva.com
tpsknowledgecentre.aveva.com
gcsresource.AVEVA.COM
testrc.import.dev-av.capdev-connect.aveva.com
dynamicsimulation.int-cep.connect.aveva.com
appservice-sanity-vek33.dev-ue.capdev-connect.aveva.com
*.chp.capdev-connect.aveva.com
urs.aveva.com
sw.aveva.com
aav4812.dashboard.dev-av.capdev-connect.aveva.com
test-license.capdev-connect.aveva.com
ssl508503.cloudflaressl.com
dbc.connect.aveva.com
rdspre.api.import.imav.connect.aveva.com
*.statusdashboard.com
alpha-datahub-cdn.dev-datahub.capdev-connect.aveva.com
thacvxp.dashboard.preprod-av.connect.aveva.com
cdo2a.api.report.dev-av.capdev-connect.aveva.com
dp-capability.sg.dp.aim.capdev-connect.aveva.com
sw.aveva.com
processengineering.test-connect.aveva.com
rdssh2.dashboard.imav.connect.aveva.com
gateway.aveva.com
int-datahub-pbi-cdn.int-datahub.capdev-connect.aveva.com
dev8.import.dev-av.capdev-connect.aveva.com
ssl322849.cloudflaressl.com
bukoshe.import.salesdemo-pv.connect.aveva.com
cdn.int-datahub.capdev-connect.aveva.com
identity.aveva.com
ram-api.filetransfer.dev-ue.capdev-connect.aveva.com
prev.liveview.dev-insight.capdev-connect.aveva.com
dynamicsimulation.connect.aveva.com
online.wonderware.com
12837234589239034672357235790.dev-dbc.capdev-connect.aveva.com
democvx.elb.tr-av.connect.aveva.com
pvtemp2.api.report.dev-av.capdev-connect.aveva.com
api.3d.pt.dev-fabtrol.capdev-connect.aveva.com
testop7.api.import.dev-av.capdev-connect.aveva.com
dev21.import.dev-av.capdev-connect.aveva.com
testop9.dashboard.dev-av.capdev-connect.aveva.com
dev-systemplatform.exchange.aveva.com
help.exchange.aveva.com
help.exchange.aveva.com
laxman-laas.dev-license.capdev-connect.aveva.com
12837234589239034672357235790.dev-dbc.capdev-connect.aveva.com
*.avs.dev-aim.test-connect.aveva.com
capdev.connect.r53.aveva.com
infra-pbi-cdn.dev-datahub.capdev-connect.aveva.com
rdspre.api.report.imav.connect.aveva.com
dev13.elb.dev-av.dev-connect.aveva.com
sni.cloudflaressl.com
access02.aveva.com
result-service.test-wse.test-connect.aveva.com
testavir.api.report.dev-aim.test-connect.aveva.com
babwas.dashboard.imav.connect.aveva.com
dev14.import.dev-av.capdev-connect.aveva.com
demorc.dashboard.dev-av.dev-connect.aveva.com
*.avs.tr-av.connect.aveva.com
testdev.import.dev-av.dev-connect.aveva.com
*.preprod-avs.capdev-connect.aveva.com
cdn.datahub.connect.aveva.com
avevaworld.aveva.com
mcbucvxtr.api.report.tr-av.connect.aveva.com
sni47348.cloudflaressl.com
ceros4.map.fastly.net
perf.dashboard.dev-av.dev-connect.aveva.com
*.aveva.com
mahtest.api.import.dev-av.capdev-connect.aveva.com
*.int-cep.connect.aveva.com
portal.services.connect.aveva.com
test-datahub-pbi-cdn.datahub.test-connect.aveva.com
dev3.alb.dev-av.dev-connect.aveva.com
mfg1cvx.import.imav.connect.aveva.com
design.aveva.com
dev9.dashboard.dev-av.dev-connect.aveva.com
bukoshe.alb.salesdemo-pv.connect.aveva.com
ceros4.map.fastly.net
*.statusdashboard.com
urs.aveva.com
gomcvx.dashboard.imav.connect.aveva.com
services.softwaresupport.aveva.com
test.tpskc.r53.aveva.com
cdodptest.alb.test-aim.test-connect.aveva.com
2anvax80xptoqf3szqsg24.dev-dbc.capdev-connect.aveva.com
4hmxzvyhs5bbgcoqybirfc.dev-dbc.capdev-connect.aveva.com

Certificate

The complete raw certificate details for management.test-experience.test-connect.aveva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWj8EieLHMTHUtDpujp2
7vSFupVnCPNlJGursFhXMbY9Ii9vQnABpMJSc3SMDy13CxqKTqVkyDmfEpIf6XsH
Fj/XjUrMQVQi9Lv1kJzQI2+jR+TIINAAVUV1RvojuEcFnUo0rru5rM3fGDycmSm/
8p+8S/A7fW9Yb3KGEqn8dlYpt6EAjRxobpfiMnBdN07td7aHEbY9Crv8SvZCJAlf
nwVXv43qtEiv5xAgrJnpB+LOuBQJGCLDNWjK0k3StiR6G4PhdDiBDVxlwH3h0lNf
R33jRUK/2ozl4aVKZ6f6Ls4VxFH2b6pYPrvyfZ1PPH75vH78gBQeFYIR1XG6il62
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10218144228578831743219621498715998215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'management.test-experience.test-connect.aveva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22395949840390216231892803686288643880539299925280802396725833715188733390590790536948995827373474683762247397095434496770839500828747084767452551810866001637885810207199328193167369818947207933494584800908147961652991717157072975213671210149488669945970352772311646218783534407887715212609785986594889267080596612163406959346018516647556704036837831144832617423957365671427353099800079027708705860062028520177317958176205000750861968478237141836729668254547407288526953782058245509214901217670794861473184403631476370135314745385336247630211301123725042808514445613497390360940422044433965949315026244246852996085331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f2d5beb17573188686c93b5acd916552b2bee2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.test-experience.test-connect.aveva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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