stache.utexas.edu

Issued by Amazon

About this certificate

This digital certificate with serial number 01:c9:51:f6:32:49:c9:f2:7f:0a:ae:7a:2c:93:c4:88 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stache.utexas.edu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c9:51:f6:32:49:c9:f2:7f:0a:ae:7a:2c:93:c4:88
Serial Number (int): 2374542045219746265398389596352660616
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a9:b3:0b:83:f6:53:bc:fd:7f:12:6b:ac:73:42:ed:2e:6d:49:80:e8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 69:50:e0:db:4c:8f:49:d7:55:86:32:37:1a:51:97:2f:50:02:2e:5c
Fingerprint (sha256): 01:5d:48:24:bc:dc:15:dd:ee:9a:b3:35:5b:6d:34:c1:21:0b:79:34:40:22:71:15:1b:ac:cf:14:db:cd:5e:cd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate stache.utexas.edu

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stache.utexas.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stache.utexas.edu
stache.security.utexas.edu
stache-campus-proxy.security.utexas.edu
utexas.stache.saltycloud.com
*.stache.saltycloud.com

Other certificates including the domain name utexas.edu

(limited to 100 certificates)
gamedev.utexas.edu
inia.ccbb.utexas.edu
5638059940904960-fe3.pantheonsite.io
cds4.cvent.com
esx-vr1-r03-lom.austin.utexas.edu
statuspage.io
tableau.dellmed.utexas.edu
test-web-lws.edu.help
5729327995944960-fe3.pantheonsite.io
pgetouchscreen.engr.utexas.edu
campuscarry.utexas.edu
fdus-27.freshdesk.com
5176288276905984-fe4.pantheonsite.io
pan.iq.utexas.edu
publishtest.austin.utexas.edu
5697124062724096-fe2.pantheonsite.io
5648554290839552-fe1.pantheonsite.io
utw10713.utweb.utexas.edu
sis.utexas.edu
5764017373052928-fe3.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
securedns2.planmygift.org
statuspage.io
idmanager.its.utexas.edu
www.ischool.utexas.edu
online.petex.utexas.edu
utw10294.utweb.utexas.edu
statuspage.io
mail.ex.mccombs.utexas.edu
utw10317.utweb.utexas.edu
extweb.iat.utexas.edu
agw-prim-green6.csr.utexas.edu
sharepoint.engr.utexas.edu
www.texasscientist.cns.utexas.edu
cluster.technolutions.net
utw10365.utweb.utexas.edu
statuspage.io
5702351037923328-fe2.pantheonsite.io
quicksites.its.utexas.edu
5755364691673088-fe1.pantheonsite.io
ig.utexas.edu
5638059940904960-fe3.pantheonsite.io
ucdc.edu
webspace.utexas.edu
xupdb02.tacc.utexas.edu
5643365030821888-fe1.pantheonsite.io
adama-dev.tacc.utexas.edu
class.utexas.edu
nartc.fcm.arizona.edu
5707532110659584-fe2.pantheonsite.io
geo.vdesk.utexas.edu
5730602795925504-fe1.pantheonsite.io
jira.tacc.utexas.edu
5763210187636736-fe2.pantheonsite.io
ieeecs.ece.utexas.edu
ethicsunwrapped.utexas.edu
nasc-web-p01.its.utexas.edu
5672749318012928-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
orionhie.cns.utexas.edu
5648554290839552-fe1.pantheonsite.io
utw10063.utweb.utexas.edu
recs-timesheetvm.its.utexas.edu
utw10457.utweb.utexas.edu
5736907271045120-fe1.pantheonsite.io
austin.codingbootcamp.utexas.edu
studentsuccess.utexas.edu
sfunder9cert.net
pypedev.its.utexas.edu
lib.utexas.edu
5763210187636736-fe2.pantheonsite.io
tableau.dellmed.utexas.edu
utw10069.utweb.utexas.edu
jabba.edb.utexas.edu
techbootcamps.extendedcampus.utexas.edu
esx-vp1-p09-lom.austin.utexas.edu
oms.iq.utexas.edu
5736907271045120-fe1.pantheonsite.io
mdm.guest-test.login.utexas.edu
sfunder9cert.net
esx-vt2-t01-lom.austin.utexas.edu
besafe.utexas.edu
5672749318012928-fe3.pantheonsite.io
utw10330.utweb.utexas.edu
5662329727352832-fe1.pantheonsite.io
cds.dev.dellmed.utexas.edu
5751399832879104-fe1.pantheonsite.io
5673309542809600-fe1.pantheonsite.io
jitsi.arlut.utexas.edu
banking-business-review.com
5729327995944960-fe3.pantheonsite.io
5673309542809600-fe1.pantheonsite.io
stache.utexas.edu
test.eis.uw.edu
astriaservices.tacc.utexas.edu
statuspage.io
shop.hrc.utexas.edu
5707532110659584-fe2.pantheonsite.io
ch301.cm.utexas.edu
5727517264576512-fe4.pantheonsite.io

Certificate

The complete raw certificate details for stache.utexas.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlZlbUoNYlynPcd3I32Q
d+bH3vjXLppiJYJUfpFvL5lpJKQWHHdEz0Phmeb+jl3EVe70amDm+dS2NMVIAimh
0r7SYinA/m7wZxH94UfpfJpKdZCuPVqf7cBNHpwg7Iywijou8xnw8+p//QgqxGFg
LRUc+wp3soRjb3F3LplkR8z3XOD4LG2h7VkY8heectK29qxQrA73YE4cziVQRpzH
XaHMXrAelZ1WDkSLvaSHNccsQnqYzCuL82WCuhI6pOT53kI1jbXegUdmbZh3sOjN
FynYqnQk6skxo69fDpo/O5VoD4iYAfjx0egyRwW37yS4cosB8bOW2q1WUY3fS+3N
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2374542045219746265398389596352660616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stache.utexas.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24027881497071040946635568039888213409596241172982736195024847678458317161715429905072463947683650647635903961661057591090312097208787534512832945615827547672994940343938291101269371741008120039223914516139488045358011983932193732490106528953795506059548064742433553571259593970924226309237116425077877131110992572797192045486302123234414473090275467932976541075247939359342377981205345745441839710355299714478591161247839674877739020281579147321496773262447943082402594540082180359668048376606432070951623297803518422082427116690115078176049730002019043752104951842625884912098649528701614472965280370960558002654537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9b30b83f653bcfd7f126bac7342ed2e6d4980e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stache.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stache.security.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stache-campus-proxy.security.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utexas.stache.saltycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stache.saltycloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166448fa5bc0000040300473045022100df78586a8542f4e6c324d987022b9da73e7afefdd46668ff31da291d1c13c10602202cf5a6017b9cef15fcf43b0051b6babd211693aa62314bd7069530cd7ceb7fb90076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166448fa68500000403004730450220345661854450d067f26d8e3bd00ba7314d0af97a3955885278197afa2fd16867022100902fbb3add81078eeb7a8eac1a280cc83d5a5e37a9c09ddc947a74f8c952bf36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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