inspec-formation.deve-resd.comcast.net

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:5f:59:08:37:af:d8:42:eb:25:94:c4:17:12:09:b6 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=inspec-formation.deve-resd.comcast.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:5f:59:08:37:af:d8:42:eb:25:94:c4:17:12:09:b6
Serial Number (int): 20433493923848830655245995445803157942
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dc:5d:e8:6c:b2:9f:73:2c:5b:36:74:9a:a4:82:72:b2:eb:05:61:7e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 8c:a3:34:f2:1c:fd:79:e6:70:90:aa:81:0b:a4:a7:8e:33:f2:54:f1
Fingerprint (sha256): 02:7f:ef:2f:a4:6a:d1:9c:64:80:4e:58:4a:00:cd:22:b8:d9:18:e6:22:fd:66:b9:4b:8b:3e:a8:62:57:75:86

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate inspec-formation.deve-resd.comcast.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for inspec-formation.deve-resd.comcast.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inspec-formation.deve-resd.comcast.net

Other certificates including the domain name comcast.net

(limited to 100 certificates)
xfwaaa.partners.sys.comcast.net
edge.images-fre-png.xcr.comcast.net
isadmin-wc-a1p.sys.comcast.net
apsportal.cable.comcast.com
sslvpn.comcast.net
*.amw2-g2.apa.comcast.net
nexus.po.sys.comcast.net
ttu-staging.comcastenterpriseservices.com
imap.ch2.comcast.net
*.device-dev.dhactivation.comcast.net
inspec-formation-test.deve-resd.comcast.net
qa2-dmsfwsrvr-fxbo-001.rtc.sys.comcast.net
mx01.biz.comcast.net
tintaiih.comcast.net
selectwifi.qa-communities.comcast.net
idp.comcast.net
*.identity.xfinity.com
cada.comcast.net
nds.cable.comcast.com
www.xfinity.comcast.net
otto.snp.comcast.com
firstrobotics.comcast.net
imap.email.comcast.net
sapecc-wc-c1q.sys.comcast.net
shuttlecloud.comcast.net
osvip-ho-a01.ece.comcast.net
jobs-stg.comcast.com
amibotted.comcast.net
xvpgridapi-dev.r53.aae.comcast.net
dt-test-07.vi.comcast.net
streamhvbr-ch2-e01p.sys.comcast.net
ama-gpt-api-comcastnow-stg.comcast.com
axon-chronos.ape.comcast.net
pimmgt-ch2-2p.platform.comcast.net
c-76-25-36-10.hsd1.co.comcast.net
shaw-bet-stage.ab.shaw.comcast.net
amdocs-aem.sys.comcast.net
*.device-dev.dhactivation.comcast.net
sptwrk-as-057p.sys.comcast.net
prestocatena-ch2-p.sys.comcast.net
x1.comcast.net
lambda-hello-world-prod.r53.aae.comcast.net
edge.myriad-lite.top.comcast.net
eccc.comcastenterpriseservices.com
*.device-dev.dhactivation.comcast.net
lambdatest.sed-dev.dh.comcast.net
*.device-dev.dhactivation.comcast.net
myapps.comcast.net
*.dashcif-nash-tn.xcr.comcast.net
sym-commonorderservice-stg.comcast.net
mail.w14zc.comcast.net
edge.cirrus-config.xcr.comcast.net
wifilogin-st.xfinity.com
*.ivodppv.xcr.comcast.net
faq.connect.comcast.net
gisstrm-po-c7p.cable.comcast.com
wirelessportal.comcast.net
videlk-dt-a1i.ula.comcast.net
*.poc.sys.comcast.net
freeswitch-ws.g.comcast.net
integration-contingent.comcast.com
*.xmidt.comcast.net
*.dev.wpil-us.comcast.net
*.test.mediaset-italia.intl.cts-ps.comcast.net
*.device-dev.dhactivation.comcast.net
inspec-lambda-form.deve-resd.comcast.net
bomui.g.cable.comcast.com
xsearch.deve-resd.comcast.net
dwg-sbc01a-con.downingtown.comcast.net
ilexservice.comcastenterpriseservices.com
stage.familyapp.comcast.net
inspec-formation.deve-resd.comcast.net
clover.comcast.net
itrcdb-wc-3i.sys.comcast.net
inspec-formation.deve-resd.comcast.net
sptwrk-as-045p.sys.comcast.net
*.device-dev.dhactivation.comcast.net
edge.music-choice-play-chainc1.top.comcast.net
ma-iportal.iris.comcast.net
test-ipv6-vm3.comcast.net
developer.xfinity.com
vd-ga-prod-e-vip.sdwan.comcast.net
*.dev.wpil-us.comcast.net
re-int.addelivery.cts.comcast.net
tuf-wc-a1p.comcast.net
turn-server-qa2-1-wbrn.comcast.net
einstein360a-uat-b.cable.comcast.com
cdn.businessclass.comcast.net
staging.ams.cim.comcast.net
*.dashcif-detr-mi.xcr.comcast.net
*.device-dev.dhactivation.comcast.net
edge.vudu-lstream-dns.top.comcast.net
ferry-api-proxy-v2-pr-48.gateway-dev.dhactivation.comcast.net
hsdmanager.sys.comcast.net
inspec-formation-test.deve-resd.comcast.net
tws.bve.comcast.net
*.dev.wpil-us.comcast.net
*.device-dev.dhactivation.comcast.net
api.wcdc.int.xfinity.com
inspec-formation-test.deve-resd.comcast.net

Certificate

The complete raw certificate details for inspec-formation.deve-resd.comcast.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPHF1EcJNd358dbbcHR/
7bxPGSR4vuRlusg7zBgKj61rOlZ7wr9PMYo2xLP8gfHnbyrELgNou17/jL0ZFSEo
Oisod9BpvkaArptWDL2ZeWurSRJk98IwpYmzVj917VGdAysDYy9XZSVAGk/nRXjx
I8Vmh/Y1cBHRufFbPza40JP2NuFeqoJdehJZm8yzGb+/4PXhh/rJjdhCCrUN76ac
8+xPf17huE+DnvPeb2cOjtUmSIlWeqzRcMONskLobqCCGo+rWKIdabfnKjOQafO3
vamuVutzBm8lWqcmDsQn75l9qiB46xUA6XbmNgz1oS5AAkuSu7+w6TZApoPTlRZF
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20433493923848830655245995445803157942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'inspec-formation.deve-resd.comcast.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23852023930164326916970891862666590775978556996768955924823625582975260244696718116399750819460342947578357911358001048449839876141129361742738967065527537641276346253758629232559229453872070521175456890412136784592929504954216179566137549209990398717789124222517193443492107304942962481603396491980055491226526995406843900394102360514053842407604991723919139494437881261306948683294650888368558110716361231311992685606653694645994834878925244429193348529389358509791178428009457407539719424016763739759885962194142767173284439537696462523592071534871073876104162562786487586657057995760564953002346906343172100998539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc5de86cb29f732c5b36749aa48272b2eb05617e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspec-formation.deve-resd.comcast.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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