stage2.www.spglobal.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:f7:dc:31:2b:fd:1b:fe:f5:36:58:6b:e8:60:8f:3b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stage2.www.spglobal.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f7:dc:31:2b:fd:1b:fe:f5:36:58:6b:e8:60:8f:3b
Serial Number (int): 3945419341534546598218235940345777979
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 39:eb:8b:32:26:63:25:fd:96:1a:8f:f6:89:63:ef:22:53:78:dc:5c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 53:eb:6e:4c:5e:a7:65:19:96:a2:15:c4:c8:c9:74:13:4a:72:9a:1a
Fingerprint (sha256): 02:0c:ea:71:da:9c:59:fb:66:25:41:2f:69:f2:7e:70:f5:0a:5b:11:61:54:0e:16:9e:b2:a1:60:5f:98:21:46

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate stage2.www.spglobal.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage2.www.spglobal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage2.www.spglobal.com
*.cphostaccess.com

Other certificates including the domain name spglobal.com

(limited to 100 certificates)
Lync2013EMEADRExt1.spglobal.com
accredible.tutor.com
*.jiveon.com
VA06MSG6003.spglobal.com
qa.np.ebb.spglobal.com
aonhrlearningcenter.credentials.aon.com
fdus-74.freshdesk.com
info.spglobal.com
academy-achievements.gong.io
sloft.spglobal.com
spglobal.com
nj09msg071.spglobal.com
*.module1-dev.micld.spglobal.com
stage2.www.spglobal.com
webmail.spglobal.com
leapfrog-ssl-1.gcs-web.com
api.qa.pmi.spglobal.com
academy-achievements.gong.io
*.module-dev.micld.spglobal.com
myreward.spglobal.com
*.jiveon.com
lync2013namdraccess.spglobal.com
*.spgi.spglobal.com
edx.standardandpoors.com
ew-aces.spglobal.com
cdn.spgi.spglobal.com
vgsathostedapps.taxsolutions.spglobal.com
webinspect.spglobal.com
rapcustomerportal.pde.spratingsvpc.com
public-davos.dev.capitalmarkets.spglobal.com
ratings.spglobal.com
sftp-qa.spglobal.com
aonhrlearningcenter.credentials.aon.com
*.xplore.spglobal.com
dcr.infomosaic.nrsdevops.spglobal.com
learning.spglobal.com
support.kot4x.com
api.prod.pmi.spglobal.com
*.aws-east-1.container.spglobal.com
sftp-qa.spglobal.com
nj12msg043.spglobal.com
*.spindices.com
webconf.spglobal.com
academy-achievements.gong.io
spglobal.com
learning.spglobal.com
*.marketintelligence.spglobal.com
uat.eventsplanner.spglobal.com
trial.marketintelligence.spglobal.com
sloft.spglobal.com
edxuat.standardandpoors.com
internal.qa.pmi.spglobal.com
aonhrlearningcenter.credentials.aon.com
razor.spglobal.com
spratingsvpc.com
interactive.spglobal.com
accredible.tutor.com
spindices.com
*.api.corp.spglobal.com
sso.spglobal.com
connect.spglobal.com
*.marketplacestage.spglobal.com
platform-b-prod-eu1.solprod.spglobal.com
*.mistagecld.spglobal.com
share.spglobal.com
academy-achievements.gong.io
stage.www.spglobal.com
*.internalstg.spglobal.com
myreward.spglobal.com
thehub.spglobal.com
*.platform.micld.spglobal.com
accredible.tutor.com
uconnect.spglobal.com
redirect.researchmanager.spglobal.com
www.marketintelligence.spglobal.com
*.pmc.spglobal.com
www.capitaliq.com
sloft.spglobal.com
share.spglobal.com
uk.ldap.spglobal.com
spkhett.spglobal.com
*.jet.spglobal.com
accredible.tutor.com
VA06MSG6006.spglobal.com
www.marketintelligence.spglobal.com
sso.spglobal.com
*.dev.spglobal.com
sf.spglobal.com
app.ratings.spglobal.com
stage.www.spglobal.com
*.api.marketintelligence.spglobal.com
*.marketintelligence.spglobal.com
fdus-74.freshdesk.com
recognition-cdn.spglobal.com
myreward.spglobal.com
*.marketplacestage.spglobal.com
*.stage-ash-w.container.spglobal.com
VA06MSG6004.spglobal.com
plattsreporting.spglobal.com
dw8apiint.taxsolutions.spglobal.com

Certificate

The complete raw certificate details for stage2.www.spglobal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArITCcj8uApqc4LTU4pEa
3yn4vdxNu5OQeIvIjhrSPJTCcGbOkuh3rAI/x2eZ3n//KlNZJJ08iD1BWLn0OjSV
P86h4NQcfmKjjdvbwK1ddNKN5+9z8a8Cl0szTNIDQSA6x87n7NDQYnoZUIno+xgO
sThtuxH7JZTir8uuuqVezdVa3hAiBJWzo7K4jp6NwPHWFRirWK974PwvWqO4hfqo
gBm2vSv9linyNetw0PfcA+2kjLRJE3LnReq0fszfHcLL4yEoFcUKTXMNEz830KhW
WfRnR6Y0ha0lAn4f4Fb65IME7fQ5gWxbcSjT09Su9RI64bElucugwaQSJYPFT/gg
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3945419341534546598218235940345777979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage2.www.spglobal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21778454631068992179421929311277422497458439026496440309338729101143197559083751828397506989234593986472194400107174721738573300933310643588394107986004627506292547234593574857142341036794040713802966980101012108389768306132545115055747672200615191353087424647060293043334026535576493217239888668776152948520445813115757881169184535232964313344826303154252566852220040757663578539259734096745262441920666306968287828024886380411549294759741982908610789069181773947223335003150254522012883751555789315856123928071716342223796228657122483078789510552779847631494975460521594620571079398545126091815003681364718344741111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39eb8b32266325fd961a8ff68963ef225378dc5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.www.spglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cphostaccess.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ef9b90c0afa1a0a6f75729109dd7ed911177420f2c9e6d9fecf6a14dee44c68632c0bce5571f585bb7df8b2498e6f3f03f15b3a0e6af9072c09518e0a3b8c31eaa028620ed76cc32aba9db8c25b0355d53461c41dfc6c464d9a75012c7395a0c82dcaca7200416a6482bf4234c9fb0af0b5e0fa007f874710817b01fa32316d5656f6a0dd3b85210c97b68ba93e9c40facce9b3425141dc01fe024fe4d2b0ff19ba070d09c4a62630ffd08d51d52bce41d7dd0602fb7877bc80cf38a11f9f2d2d8b04caa265383e2789fa0cf81c50256a5edbc975fb5e9adfc117b4843cb9e215f0da7ff135e89ef48731c171bb910c1002ac0972300dae0949fb33ee96f015