beapi.us-east-1.ndsuat.nudatasecurity.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:d1:42:a2:40:c2:bb:68:37:f2:e5:47:f1:aa:05:bc was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=beapi.us-east-1.ndsuat.nudatasecurity.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:d1:42:a2:40:c2:bb:68:37:f2:e5:47:f1:aa:05:bc
Serial Number (int): 19695733478461226758683382710773876156
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 84:51:7f:fa:e2:07:bd:08:e5:62:9a:c5:d3:5b:61:84:81:a9:3a:2c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): de:31:b7:5f:16:6a:e7:3e:de:01:16:05:8b:4e:1a:ce:08:19:55:3d
Fingerprint (sha256): 01:fb:cf:fd:86:22:99:3b:a0:f0:e8:da:45:3c:39:3c:f1:bb:42:2f:13:72:aa:a5:0f:0e:88:1d:fb:db:88:91

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate beapi.us-east-1.ndsuat.nudatasecurity.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beapi.us-east-1.ndsuat.nudatasecurity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beapi.us-east-1.ndsuat.nudatasecurity.com
beapi.ndsuat.nudatasecurity.com

Other certificates including the domain name nudatasecurity.com

(limited to 100 certificates)
ndsdms-ecs.ndsprod.nudatasecurity.com
service-ice.idcx-qa-aion.nudatasecurity.com
api-us-east-1.nd.nudatasecurity.com
ndcdms-penetration-us-east-1.ndsdev.nudatasecurity.com
ndcdms-mtf-us-east-1.lpstg.nudatasecurity.com
ndelms-us-west-2.ndsuat.nudatasecurity.com
api-us-east-1.nd-mtf.nudatasecurity.com
sip.ca1.hostedlync.com
ssl003.insnw.net
sip.ca1.hostedlync.com
ndcdms-mtf-us-east-1.ndsprod.nudatasecurity.com
service-ops-us-east-1.aion-dev.nudatasecurity.com
beapi-eu-west-1.ndsopob.nudatasecurity.com
api.aion-dev.nudatasecurity.com
service-config-dev-us-east-1.p2.lpstg.nudatasecurity.com
ndsoa-us-east-1.ndsopew.nudatasecurity.com
jenkins-us-east-1.nucaptcha.nudatasecurity.com
dashboard-us-east-1.ndsopew.nudatasecurity.com
ssl003.insnw.net
api.td-dev-aion.nudatasecurity.com
api-wfc-stg-ga.nd.nudatasecurity.com
jenkins-us-west-2.ndsopck.nudatasecurity.com
beapi.us-east-1.ndsuat.nudatasecurity.com
service-demo-aion-yt.aion-dev.nudatasecurity.com
beapi-us-west-2.ndsopck.nudatasecurity.com
dashboard.us-east-2.ndcc123.ndsonica.nudatasecurity.com
ndapi-us-east-1.ndsprod.nudatasecurity.com
sip.ca1.hostedlync.com
ndsoa-us-east-1.ndsqa.nudatasecurity.com
*.nd.nudatasecurity.com
ndcounterms-us-west-2.ndsopck.nudatasecurity.com
ndsoa-us-east-1.ndsprod.nudatasecurity.com
ssl003.insnw.net
nduseragentms-us-east-1.ndsdev.nudatasecurity.com
api-eu-west-1.ato-dev-aion.nudatasecurity.com
saad3.us-east-2.ndcc123.ndsonica.nudatasecurity.com
mitsuo-iam-us-east-1.p2.lpstg.nudatasecurity.com
ndudidms-us-east-1.lpstg.nudatasecurity.com
bogdan-tst-service-demo.p2.lpstg.nudatasecurity.com
key1-us-east-1.ndcc123.ndsonica.nudatasecurity.com
api-ap-southeast-1.automation-dev-aion.nudatasecurity.com
service-ops.aion-dev.nudatasecurity.com
mitsuo-iam.p2.lpstg.nudatasecurity.com
nudevice-us-east-1.p2.lpstg.nudatasecurity.com
*.ndsopck.nudatasecurity.com
api-us-west-2.nd-mtf.lpstg.nudatasecurity.com
service-config-dev-test.p2.lpstg.nudatasecurity.com
nudevice-test.p2.lpstg.nudatasecurity.com
ssl003.insnw.net
sip.ca1.hostedlync.com
ndsessionms-us-east-1.ndsqa.nudatasecurity.com
dashboard-us-east-1.ndsopew.nudatasecurity.com
ssl003.insnw.net
*.nudatasecurity.com
key-internal-us-west-2.ndsprod.nudatasecurity.com
nduseragentms-eu-west-1.ndsopob.nudatasecurity.com
beapi-eu-west-1.nucaptcha.nudatasecurity.com
api.automation-dev-aion.nudatasecurity.com
console.aion.nudatasecurity.com
ssl003.insnw.net
ndcounterms-us-east-1.ndcc123.ndsonica.nudatasecurity.com
ndqa-us-east-1.ndsopew.nudatasecurity.com
beapi-ap-southeast-2.ndsprod.nudatasecurity.com
saad5.us-east-2.ndcc123.ndsonica.nudatasecurity.com
sun-serv-iam.p2.lpstg.nudatasecurity.com
nudevice.p2.lpstg.nudatasecurity.com
ndcdms-dev-us-east-1.lpstg.nudatasecurity.com
service-ice.idcx-qa-aion.nudatasecurity.com
*.nd.nudatasecurity.com
service-demo-aion-us-west-2.aion-dev.nudatasecurity.com
ndpe-01.nd.nudatasecurity.com
sip.ca1.hostedlync.com
api-us-east-1-us-east-1.aion-qa.nudatasecurity.com
ndsoa-us-east-1.lpstg.nudatasecurity.com
key-internal-us-east-1.lpstg.nudatasecurity.com
ndcaptchams-us-west-2.ndsuat.nudatasecurity.com
api.ato-dev-aion.nudatasecurity.com
ndqa-us-east-1.ndsuat.nudatasecurity.com
beapi-us-east-1.ndsopma.nudatasecurity.com
api-eu-west-1.td-dev-aion.nudatasecurity.com
jenkins.intra.nudatasecurity.com
ndcdms-dev-us-east-1.ndsqa.nudatasecurity.com
nnl-admin-us-east-1.fido-dev.nudatasecurity.com
ndpe-01.nd.nudatasecurity.com
api-us-east-1.nd.nudatasecurity.com
service-iam.p2.lpstg.nudatasecurity.com
ndsdms-ecs.ndsdev.nudatasecurity.com
duo.intra.nudatasecurity.com
ssl003.insnw.net
key1-us-west-2.ndcc123.ndsonica.nudatasecurity.com
service-config-dev-test.p2.lpstg.nudatasecurity.com
asgard.ndsopck.nudatasecurity.com
*.nd.nudatasecurity.com
jenkins-us-west-2.ndsopck.nudatasecurity.com
ssl003.insnw.net
saad800.us-east-2.ndcc123.ndsonica.nudatasecurity.com
ssl003.insnw.net
api-wfc.nd.nudatasecurity.com
ndapi-us-west-2.ndsprod.nudatasecurity.com
service-config-dev-test-us-east-1.p2.lpstg.nudatasecurity.com

Certificate

The complete raw certificate details for beapi.us-east-1.ndsuat.nudatasecurity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxwhKto2qEN54L+wf2E+
N8OH5A613o2WKvAQxoU1AhlUf/p70BfZaoISzUkxhfYZfoFchGd4dYeAxHLD2bz4
9SJfrPKsA2MWm4MZR5o3Z/SdSCfupgFjczCGrVripv9BV/oSSVirSCaZ9yASwLyh
isqFdjqQOIaHlpvDRJo6co3o1kUjOPcnXwCBczNc91j6KjD/fyNZy7QIMC0Auw8r
89DXus5MpK1mxPcdT4w22+/017WSKjhgld4ErUO6N8XOreNUp5beZHWAqzmuhXbq
B2C45yj+8YXlGLYbVWw0nu0Q3YWJbtQqXFkyTyddkDIP2NlHxPVgaQayWTEiPc+p
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19695733478461226758683382710773876156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beapi.us-east-1.ndsuat.nudatasecurity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24125387451601988093327468675649454865398313173221033715887307119132966676207495448430097250874944692960861533062640932116973642095205509120239453856326383384362632657903327285423842042330154017152613782317785957766096682021874144406036521213662514815167738836277123873605691947373073117186444825712164615474560592699308392574202241616768405430315980017991400672272050039197592544531282260128563550624783927534768341143117350161143078518911952951639261544172455826044990445413484150247223561523858772452485260278756050964452508554782869847725797736990842498248844741788050472689886000935227558791944452688589695723781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84517ffae207bd08e5629ac5d35b618481a93a2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beapi.us-east-1.ndsuat.nudatasecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beapi.ndsuat.nudatasecurity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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