highbond-combined-eu.aclgrc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:ed:9b:a0:e9:2c:65:0e:2d:ed:2e:45:f1:2d:55:5f was issued on by Amazon.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=highbond-combined-eu.aclgrc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:ed:9b:a0:e9:2c:65:0e:2d:ed:2e:45:f1:2d:55:5f
Serial Number (int): 9209098852340494921609280524471063903
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 90:c0:9d:50:95:6b:07:1e:75:32:0b:a3:c9:87:cf:76:41:9f:9d:c3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 97:70:66:81:08:1b:af:50:9d:d4:22:0e:2a:d4:cd:7d:7e:9b:40:99
Fingerprint (sha256): 02:cd:d4:0b:c3:ef:45:d7:cd:2e:6f:6a:ed:c8:95:e5:b8:73:e5:62:42:2d:64:1f:77:12:6c:b4:04:8c:29:d6

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate highbond-combined-eu.aclgrc.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for highbond-combined-eu.aclgrc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

highbond-combined-eu.aclgrc.com
aclgrc.com
*.aclgrc.com
*.projects-eu.aclgrc.com
*.reports-eu.aclgrc.com
*.results-eu.aclgrc.com
*.risks-eu.aclgrc.com
highbond.com
*.highbond.com
*.projects-eu.highbond.com
*.reports-eu.highbond.com
*.results-eu.highbond.com
*.risks-eu.highbond.com

Other certificates including the domain name aclgrc.com

(limited to 100 certificates)
statuspage.io
status.aclgrc.com
statuspage.io
statuspage.io
*.risks-ap.aclgrc.com
statuspage.io
eu.status.grow.clio.com
statuspage.io
atlas-alerts.mit.edu
statuspage.io
statuspage.io
statuspage.io
*.results-ap.aclgrc.com
3down.mit.edu
highbond-combined-eu.aclgrc.com
statuspage.io
*.results-eu.aclgrc.com
atlas-alerts.mit.edu
statuspage.io
statuspage.io
eu.status.grow.clio.com
new-status.ucsd.edu
highbond-combined-au.aclgrc.com
statuspage.io
statuspage.io
*.results-ap.aclgrc.com
statuspage.io
*.results-au.aclgrc.com
*.risks-eu.aclgrc.com
eu.status.grow.clio.com
statuspage.io
statuspage.io
statuspage.io
atlas-alerts.mit.edu
statuspage.io
*.risks.aclgrc.com
statuspage.io
atlas-alerts.mit.edu
tardis.aclgrc.com
highbond-combined.aclgrc.com
tardis.aclgrc.com
statuspage.io
statuspage.io
statuspage.io
atlas-alerts.mit.edu
statuspage.io
statuspage.io
*.hub-au.aclgrc.com
accounts.aclgrc.com
statuspage.io
statuspage.io
statuspage.io
atlas-alerts.mit.edu
statuspage.io
new-status.ucsd.edu
statuspage.io
*.aclgrc.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
atlas-alerts.mit.edu
downloads.highbond.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
caloes.status.rapiddeploy.com
atlas-alerts.mit.edu
statuspage.io
statuspage.io
new-status.ucsd.edu
atlas-alerts.mit.edu
atlas-alerts.mit.edu
atlas-alerts.mit.edu
new-status.ucsd.edu
statuspage.io
statuspage.io
*.projects-au.aclgrc.com
statuspage.io
statuspage.io
highbond-combined-eu.aclgrc.com
*.projects-eu.aclgrc.com
statuspage.io
atlas-alerts.mit.edu
*.aclgrc.com
highbond-combined-eu.aclgrc.com
statuspage.io
*.robots-eu.aclgrc.com
statuspage.io
*.results-ap.aclgrc.com
*.aclgrc.com
statuspage.io
*.hub-ap.aclgrc.com
statuspage.io
statuspage.io
statuspage.io
*.projects-eu.aclgrc.com
atlas-alerts.mit.edu

Certificate

The complete raw certificate details for highbond-combined-eu.aclgrc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiihnXR7ihQTmKdS8598
DPlnjEVRc3QJVxzXtU8m/a2IDMfK66pRsCl2SdKMMy803jEnOQMhwTH/8u33riK1
0RCN4GwexWRPz9BClhsSLYOQlURLPP/mghFfRsYILEkI/Mvr/EtbEOJ16oI1DJty
ikyb5ZCKjcubu54as84DwMXvrrI5r44Bz/vXr2xSWAhCABjYhWYcl/S6oFzZQcDK
cBiCuR/fStWsR/iv5kclPPvAvxfOjUBClRokFrl4rg9tNZsHfdJrg6KoX4w2ompM
/qeWfdWx9/XiKRNMZm+AMry+kFJAV8NnlXxqw+bXFRb4s46ngNY2zIJT4/epZ+1N
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9209098852340494921609280524471063903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'highbond-combined-eu.aclgrc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16935968910585999470969908930816995750452732123074475078735927457238499598889167434897241869552781693610545130977554025750863347876637348529412110663545681429360111653532388817512480660751830414864436432307379994462449060989508551468624784317907344664377493210736142271804394040517474041688293064292343205761847995832596530546058283595422481953823996347838433941116756159472741137691789587215599690128959951239897997735421977475370330173129705265445018627351624739721946044491516478451536202599705907059971912316907410298347024174451055287894119514638984331682064906636900124939292911670989434317845033103084569316659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90c09d50956b071e75320ba3c987cf76419f9dc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highbond-combined-eu.aclgrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclgrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aclgrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projects-eu.aclgrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reports-eu.aclgrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.results-eu.aclgrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risks-eu.aclgrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highbond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highbond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projects-eu.highbond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reports-eu.highbond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.results-eu.highbond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risks-eu.highbond.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000169bbef6acf0000040300483046022100a85d19c2f391beb152fa486c5d157a636c843a3d6098219310ff72757be807c4022100d8d1a58a28753d13b4ec35d823d6536bc9ae2a9e074ce7ece02a7850e188e6f30077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169bbef6be8000004030048304602210090d03982b8623c55c27739229acbf9456e82f26c6e1e09144b184214481e1d26022100dc385e47d876d0cf50c6bec87d589d1ef1f15b9ca810cdcc86b7c907c53da948
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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