auth.u19s9b69.eu-west-1.cre-dev.schibsted.io

Issued by Amazon

About this certificate

This digital certificate with serial number 09:d7:4a:f7:4f:dd:e1:b6:06:f9:33:cb:47:f7:c6:a5 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.u19s9b69.eu-west-1.cre-dev.schibsted.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:d7:4a:f7:4f:dd:e1:b6:06:f9:33:cb:47:f7:c6:a5
Serial Number (int): 13080916279033596315460728299042883237
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 71:31:de:4e:b2:a5:2d:c0:aa:72:5d:2e:62:1e:cc:79:b2:6a:50:08
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4c:43:28:ed:7b:34:d3:90:1c:f3:4c:ab:cb:7c:33:e9:c6:1a:1a:3a
Fingerprint (sha256): 02:6e:83:24:2f:e9:6c:67:c0:e3:64:ac:c4:19:30:f5:aa:3e:67:33:af:b9:4f:9d:0b:4e:41:c4:75:1b:1d:92

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate auth.u19s9b69.eu-west-1.cre-dev.schibsted.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.u19s9b69.eu-west-1.cre-dev.schibsted.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.u19s9b69.eu-west-1.cre-dev.schibsted.io

Other certificates including the domain name schibsted.io

(limited to 100 certificates)
*.heimdall.ingress.c19se100.eu-west-1.cre-dev.schibsted.io
auth.c19s8b1f.eu-west-1.cre-dev.schibsted.io
heimdall-ips.heimdall-dev.schibsted.io
*.hackvpa.eu-west-1.cre-dev.schibsted.io
njaidro4abmpwwgwoq7udrhdyf2euk67.df-pro-2.eks.schibsted.io
token.fsr12.eu-west-1.cre-dev.schibsted.io
*.u19sfae1.eu-west-1.cre-dev.schibsted.io
*.adsapi-pro-2.eks.schibsted.io
core-internal.sch-vulcan-pro.schibsted.io
*.c19s3709.eu-west-1.cre-dev.schibsted.io
*.global-pre.spain.schibsted.io
mpt-adsol.pre.schibsted.io
token.dmegyesi.eu-west-1.cre-dev.schibsted.io
*.storage.schibsted.io
*.u19sa0d6.eu-west-1.cre-dev.schibsted.io
rnhzygxpyqu6ct7grl37k.lendo-pre.lendo-no-pre-1.eks.schibsted.io
*.heimdall.ingress.c19sd341.eu-west-1.cre-dev.schibsted.io
dev-travis.schibsted.io
users.schibsted.io
auth.ch811.eu-west-1.cre-dev.schibsted.io
*.heimdall.ingress.c19s17e6.eu-west-1.cre-dev.schibsted.io
auth.c19sd455.eu-west-1.cre-dev.schibsted.io
api.messaging-pre.advgo.net
demo.ms-pre.schibsted.io
*.heimdall.ingress.u19s1ac0.eu-west-1.cre-dev.schibsted.io
*.storage.schibsted.io
*.heimdall.ingress.daniel.eu-west-1.cre-dev.schibsted.io
*.mpt-ml-dev.schibsted.io
messaging.schibsted.io
documentservice.domain.sentinel-pre-1.eks.schibsted.io
x6kpmiae5cp2zuit7mpr7.lendo-dev.lendo-no-pre-1.eks.schibsted.io
tableau.schibsted.io
*.heimdall.ingress.u19sa0d6.eu-west-1.cre-dev.schibsted.io
token.fsr12.eu-west-1.cre-dev.schibsted.io
clair-ext.spt-infrastructure-security-dev.schibsted.io
*.privacy-dev.schibsted.io
auth.u19s9b69.eu-west-1.cre-dev.schibsted.io
messaging-dev.schibsted.io
confluence-dev-upgrade.schibsted.io
vulcan-agent-persistence-internal-dev.schibsted.io
jira-dev-test.schibsted.io
auth.os14.eu-west-1.cpr-dev.schibsted.io
vglive.no
*.id-pre.schibsted.io
*.core.schibsted.io
*.u19s762c.eu-west-1.cre-dev.schibsted.io
security-dashboard-dev.schibsted.io
ica6w56n476ydbyqhqsgcittr376m7z.lendo-no-pro-1.eks.schibsted.io
vglive.no
auth.c19sfae1.eu-west-1.cre-dev.schibsted.io
*.id-dev.schibsted.io
*.c19s17e6.eu-west-1.cre-dev.schibsted.io
auth.c19s0212.eu-west-1.cre-dev.schibsted.io
5cft4d7pzpy4xetjgmrgsxdhnqiao5x.lendo-no-pro-1.eks.schibsted.io
ice-hockey-bff.dev.sportsnext.schibsted.io
*.cprinc8.eu-west-1.cre-dev.schibsted.io
docs.devrel-dev.schibsted.io
id.aboutme.schibsted.com
all-sites-stable.config.messaging.pre.schibsted.io
lbmp.privacy-pre.schibsted.io
whereisthelove.schibsted.io
privacy.rkt.dev.schibsted.io
tableau.schibsted.io
token.zonza.us-east-1.cpr-dev.schibsted.io
*.u19sa97d.eu-west-1.cre-dev.schibsted.io
*.heimdall.ingress.expmnt.eu-west-1.cpr-dev.schibsted.io
*.heimdall.ingress.dev01.eu-west-1.cre-dev.schibsted.io
auth.zonzb.eu-west-1.cpr-dev.schibsted.io
*.heimdall.ingress.u19s5d63.eu-west-1.cre-dev.schibsted.io
users-schema.id-dev.schibsted.io
token.schip-dev01.cre-dev.schibsted.io
auth.fsero.eu-west-1.cre-dev.schibsted.io
syney7ltwzjx2nogz2yorny3kr3jiant.rkt-pro-1.eks.schibsted.io
*.prod01.eu-west-1.cre-pro.schibsted.io
nazerbvxa3tpdkrjrbj2z.lendo-dev.lendo-no-pre-1.eks.schibsted.io
auth.u19sa052.eu-west-1.cre-dev.schibsted.io
token.marc14.us-east-1.cpr-dev.schibsted.io
*.eduard.eu-west-1.cre-dev.schibsted.io
pmy4ycdfnaboxoq2jrqed.lendo-pre.lendo-no-pre-1.eks.schibsted.io
auth.u19s2f25.eu-west-1.cre-dev.schibsted.io
rose-crazy-lumberjack.mpt-adsol.pre.schibsted.io
prometheus.pre.sportsnext.schibsted.io
www.3143.pr.admarketpolaris.mpt-adsol.pre.schibsted.io
4etpggga2tnyvoula2h6e.lendo-pre.lendo-no-pre-1.eks.schibsted.io
api.houston.dev.schibsted.io
auth.u115s9d8.eu-west-1.cre-dev.schibsted.io
*.rkt.dev.schibsted.io
user-history.privacy-pre.schibsted.io
search-engineering-dev.schibsted.io
*.schibsted.io
scom-dev.schibsted.io
privacysettings-dev-fi.schibsted.io
fdd-test.ingress.cre-pro.schibsted.io
auth.oscar11.eu-west-1.cre-dev.schibsted.io
*.heimdall.ingress.c19s6ff5.eu-west-1.cre-dev.schibsted.io
auth.u19s69b1.eu-west-1.cre-dev.schibsted.io
*.heimdall.ingress.chadell.eu-west-1.cre-dev.schibsted.io
*.lendo.no
vulcan-results-pre.schibsted.io
*.eks.identity-dev.schibsted.io

Certificate

The complete raw certificate details for auth.u19s9b69.eu-west-1.cre-dev.schibsted.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvnJMQBmj3dCGEXPWfdy
OaErcpP4hDroOq8N8e8jwUlFynGHcdLi/oQwIk3iTrWwkw3k7//xv1JiKyesjhux
CYOHoVCnmGYk2mQZVe7q7UkOZg9Yu7JCqiyB6lubTp/4XZmTbKPu2oh6Xd5taVKl
UBuXA2fkW1gJ1L329GKjuWRbEZ7yO5TOr0YZ9gg9vhwUp+42XN+hxVTAp6GoNByK
Dty3is+arICoLFcdMILs8EGBA3kewSCekQVbrguhacU6ejwHZigzL+vDs3jLIA9r
zgv29NM9SeiHmpLsxEhWkeSU2IEywLTq7sI2lSzVElHvIl/wmuuVIw/5MdWukX+N
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13080916279033596315460728299042883237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.u19s9b69.eu-west-1.cre-dev.schibsted.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24108451963549717378200303082983594405071135975212234680273669610314722570628898583589360345257651052468113204547300870915805813725699247399424361276823762594955071848141897879111814445909579343353159836748513215223803397028156650596547749258532797755642455720511918737417436172829624296606352930985367637004121148496051136590564985963953050214465416217925502892197769195777177002680667140873153294765404008270276560047294361767416420006922078828454568448532645890572600102486348285055615504306397437151138411598319958959841348717387524098806211806060654014393991082628353847030894446972376236524655330980236179246491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7131de4eb2a52dc0aa725d2e621ecc79b26a5008
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.u19s9b69.eu-west-1.cre-dev.schibsted.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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