account-api.turningtechnologies.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:06:79:2a:ea:2a:02:cf:b1:9a:29:e9:a4:b9:b5:df was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=account-api.turningtechnologies.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:06:79:2a:ea:2a:02:cf:b1:9a:29:e9:a4:b9:b5:df
Serial Number (int): 5350523335906020367235024644046697951
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9d:eb:4c:1d:fe:22:e6:ba:d6:7e:11:8e:81:c1:79:1d:ac:78:58:cd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 72:88:8a:69:13:1a:9f:7d:a0:8f:4a:bb:e5:fc:80:31:84:e5:3e:4a
Fingerprint (sha256): 02:e1:71:4e:4a:0e:c0:5c:9f:1d:b6:b1:02:3a:3b:94:55:b0:74:e9:8b:ac:6d:9b:b3:db:98:f6:08:4c:29:96

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate account-api.turningtechnologies.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for account-api.turningtechnologies.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account-api.turningtechnologies.com

Other certificates including the domain name turningtechnologies.com

(limited to 100 certificates)
uwgb.turningtechnologies.com
polling.turningtechnologies.com
ithelpdesk.turningtechnologies.com
student.turningtechnologies.com
rebates.turningtechnologies.com
ucmercedtest.turningtechnologies.com
laurentian.turningtechnologies.com
jira-service-management.status.atlassian.com
utm.turningtechnologies.com
jira-service-management.status.atlassian.com
web-store-consumer.turningtechnologies.com
gradebook.dev.turningtechnologies.com
uww.turningtechnologies.com
account-api.turningtechnologies.com
devryu.turningtechnologies.com
rebates.turningtechnologies.com
signup.turningtechnologies.com
polling.turningtechnologies.com
jira-service-management.status.atlassian.com
polling.turningtechnologies.com
polling.turningtechnologies.com
kingstontest.turningtechnologies.com
jira-service-management.status.atlassian.com
content.turningtechnologies.com
auc.turningtechnologies.com
blinn.turningtechnologies.com
oregonstate.turningtechnologies.com
weatherfordtest.turningtechnologies.com
saintmarys.turningtechnologies.com
admin-dojo360.turningtechnologies.com
polling.turningtechnologies.com
jira-service-management.status.atlassian.com
api.turningtechnologies.com
jira-service-management.status.atlassian.com
student.turningtechnologies.com
lms-integration.turningtechnologies.com
wilkes.turningtechnologies.com
assets-dojo360.turningtechnologies.com
ursinus.turningtechnologies.com
store-api.turningtechnologies.com
store.turningtechnologies.com
villanova.turningtechnologies.com
www.turningtechnologies.com
kingstontest.turningtechnologies.com
bolt.turningtechnologies.com
sni.cloudflaressl.com
uthscsa.turningtechnologies.com
user-server-consumer.turningtechnologies.com
uga.turningtechnologies.com
account.turningtechnologies.com
pgnotification.turningtechnologies.com
calu.turningtechnologies.com
turningtechnologies.com
sakai.turningtechnologies.com
go.turningtechnologies.com
knowbly-main-api.turningtechnologies.com
esu.turningtechnologies.com
connect.turningtechnologies.com
briarcliff.turningtechnologies.com
npm.turningtechnologies.com
murraystate.turningtechnologies.com
dartmouth.turningtechnologies.com
www.turningtechnologies.com
content.turningtechnologies.com
admin.turningtechnologies.com
alfredu.turningtechnologies.com
polling.turningtechnologiessg.net
bscc.turningtechnologies.com
uw.turningtechnologies.com
msun.turningtechnologies.com
uncc.turningtechnologies.com
ucdenver.turningtechnologies.com
responseware.turningtechnologies.com
results.turningtechnologies.com
polling.turningtechnologies.com
csun.turningtechnologies.com
neo.turningtechnologies.com
iu.turningtechnologies.com
webreg.turningtechnologies.com
templeu.turningtechnologies.com
store.turningtechnologies.com
jira-service-management.status.atlassian.com
email.turningtechnologies.com
ttcu.turningtechnologies.com
jira-service-management.status.atlassian.com
sni.cloudflaressl.com
jira.turningtechnologies.com
scheduling.turningtechnologies.com
build.turningtechnologies.com
upenn.turningtechnologies.com
content.turningtechnologies.com
umc.turningtechnologies.com
uiowa.turningtechnologies.com
uga.turningtechnologies.com
turningtechnologies.com
sni.cloudflaressl.com
uwm.turningtechnologies.com
uakron.turningtechnologies.com
uiowa.turningtechnologies.com
rebates.turningtechnologies.com

Certificate

The complete raw certificate details for account-api.turningtechnologies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMZFlUtiAY1UB++9XWGC
VKLgn2UCC2jKtwgqEGu0l1Z7fpuUewoIo4AM4WCzR2LY4GxAPmlnb8bzUvlI1B1L
KVtp+nk8EtWmXN1lKciDuZI5Vv6GFbAHRhE0OU0GTPtRgERC25HDuYw294jIxOS3
ArX+vvd5NnI/xZajmnssekj8FLPvfYVku4aQfHa5xGLM4IQSKyLONjnUousDFEJF
nUTemQUi1sHBDy11zh+ibCT38sUCNRdqJ0lFqN1fY1XsDyvRuRKPC+Nndn9jG/vJ
jjhw+8SpIhx8s0PQCf2FewQ5wW9+dV9rtQfEL1smqkiMSay971yKBAB78pX4fxMJ
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5350523335906020367235024644046697951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'account-api.turningtechnologies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19790947047865032549007627273394605780738348579429624698238701440480657380471602754710132129217213832584220399279044887831338400865056009504601804606194715452190731743082070156926281812732699195470902456141958475552810361509364439861369185148477664160486863848070569144886942581941871744275266664067248710110778219438487534626559293307126151864379418928822861294822290604133701063613222803090648634946271561648958349784543681625137391592294925822371105052345381997380136033775168890824905698149816216651553097907963536862173648598937793979894352747564066199955575054335697206413934430207919487273126743624735610046863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9deb4c1dfe22e6bad67e118e81c1791dac7858cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-api.turningtechnologies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000167e816f7fb000004030047304502207224c3bf32912f5d85101b3070c1eaff4884911f35a8a43d5eea44db6d15161e022100b971c40cb0468a9cfcfb30f28e5236e96d7d57e9a870cc368f944254c225c24c0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167e816f8d80000040300473045022020bdd38208920541f47045d5bb232a150e15a78f33611da56c69f175e8bf40ba022100872f69ac668d8a5afd98878c04cd344c7cd37b012892ba21c3f51b3706edf06c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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