jwaller-app-int-east.test.cgraph.bestbuy.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:35:a9:b1:f5:18:79:e8:46:d4:7e:09:16:50:91:b8 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jwaller-app-int-east.test.cgraph.bestbuy.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:35:a9:b1:f5:18:79:e8:46:d4:7e:09:16:50:91:b8
Serial Number (int): 5595545543103208830009933809979527608
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a3:b3:04:62:5c:13:39:ee:ca:c6:5e:c6:f8:e1:fb:f3:69:d6:02:37
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 2a:e8:84:7b:e2:54:c9:9c:8e:ad:ab:bb:c6:98:5e:a0:ac:61:12:bc
Fingerprint (sha256): 02:e6:a4:c9:a2:51:ef:1a:ff:a1:7d:e4:e0:0f:0a:52:e4:76:ba:5a:70:2d:fb:65:d1:24:e6:be:3c:50:30:98

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate jwaller-app-int-east.test.cgraph.bestbuy.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jwaller-app-int-east.test.cgraph.bestbuy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jwaller-app-int-east.test.cgraph.bestbuy.com

Other certificates including the domain name bestbuy.com

(limited to 100 certificates)
san.bestbuy.com
attechapi-app-int-east.stage.browse.bestbuy.com
kibana.test.monitoring.bestbuy.com
bttnview-njs-int-east.test.browse.bestbuy.com
advsmlssrvc-app-int-west.prod.browse.bestbuy.com
swift1.prod.skyblue.bestbuy.com
access.bestbuy.com
addsource-app-int-east.prod.browse.bestbuy.com
pricevw-njs-ext-west.prod.browse.bestbuy.com
ofrsvapi-app-ext-east.test.browse.bestbuy.com
commerce-api.test.bestbuy.com
apid-app-west-int.prod.browse.bestbuy.com
identity-ingress-global.dev.gcp.bestbuy.com
apex-configservice-global.test.gcp.bestbuy.com
mexico-web-west.prod.browse.bestbuy.com
platmanpb-app-int-west.prod.browse.bestbuy.com
accessfedpl.bestbuy.com
lstsrvces-app-ext-east.test.browse.bestbuy.com
bestbuyconnect.com
drwsmpanntwlv-app-int-east.test.cgraph.bestbuy.com
priceviewn-app-ext-east.test.browse.bestbuy.com
profulfil-web-east.test.browse.bestbuy.com
bbytagservices.bestbuy.com
tableau-qa.na.bestbuy.com
dhodawkthrtne-app-int-east.prod.browse.bestbuy.com
marf-app-int-east.prod.browse.bestbuy.com
bryntstpplctn-app-int-east.prod.browse.bestbuy.com
trnrsksrv-app-int-west.prod.browse.bestbuy.com
airwatch-linux.bestbuy.com
ugc-slr-east.prod.browse.bestbuy.com
*.bestbuy.com
ordrhstrpblsh-app-int-west.prod.browse.bestbuy.com
leviathanapi-app-ext-east.stage.aws.bestbuy.com
aw.bestbuy.com
sherlock-core-stage.test.gcp.bestbuy.com
trk.email.bestbuy.com
sidcs-app-east.stage.browse.bestbuy.com
*.bestbuy.com
span-api-east-int.prod.browse.bestbuy.com
secure03.lithium.com
ggleassrt-app-int-east.stage.browse.bestbuy.com
fulfview-njs-int-east.test.browse.bestbuy.com
cartagg-app-int-east.test.browse.bestbuy.com
sercalendar-app-int-east.stage.browse.bestbuy.com
sentry-app-int-east.stage.cgraph.bestbuy.com
plt-images-ssl-pls.stage.bestbuy.com
psccreturns-app-int-east.stage.browse.bestbuy.com
remixslr-app-int-east.test.browse.bestbuy.com
sts.bestbuy.com
mexico-web-east.prod.browse.bestbuy.com
dhodawkthrtne-app-int-west.prod.browse.bestbuy.com
bttnstate-app-int-east.prod.browse.bestbuy.com
MPOSDEV.na.bestbuy.com
lstsrvces-app-ext-east.stage.browse.bestbuy.com
pdmpblshr-app-int-east.test.browse.bestbuy.com
appdirectory.bestbuy.com
drwsmpanmthrt-app-int-east.test.cgraph.bestbuy.com
payments-prod.actdvc.bestbuy.com
shipping-app-int-east.test.browse.bestbuy.com
images-ssl.bestbuy.com
mexco-njs-ext-west.prod.cgraph.bestbuy.com
ostmonitor-app-int-east.stage.browse.bestbuy.com
shipping-api-east-int.test.browse.bestbuy.com
hub.bestbuy.com
pl.bestbuy.com
dhdatrggerrex-app-int-west.prod.browse.bestbuy.com
ext.location-west.prod.browse.bestbuy.com
fulfview-njs-int-west.prod.browse.bestbuy.com
bestbuybusiness.com
actdvcs-app-east.test.browse.bestbuy.com
vpt-slr-int-east.stage.browse.bestbuy.com
ofrsvapi-app-int-east.prod.browse.bestbuy.com
csi-app-ext-west.prod.browse.bestbuy.com
cap-pt-spring-use.bestbuy.com
secure03.lithium.com
esd-pl1.bestbuy.com
aaa.bestbuy.com
vpt-slr-int-east.test.browse.bestbuy.com
pl.bestbuy.com
cfgread-app-west.prod.browse.bestbuy.com
dhdarelsrfdaf-app-ext-east.prod.browse.bestbuy.com
search-slr-east.stage.browse.bestbuy.com
solrindex-app-int-east.stage.browse.bestbuy.com
suggest-web-east.prod.browse.bestbuy.com
aquisview-njs-int-east.prod.browse.bestbuy.com
BBYSTAR-HP-DEV.bestbuy.com
jwaller-app-int-east.test.cgraph.bestbuy.com
carbonaggaws-njs-int-west.prod.cgraph.bestbuy.com
cx-ccai-dfcx-api-stage.prod.gcp.bestbuy.com
searchruleslr-app-int-west.prod.browse.bestbuy.com
pdmingest-app-int-west.prod.browse.bestbuy.com
scheddelvsrvc-app-ext-west.prod.browse.bestbuy.com
payments-stage.actdvc.bestbuy.com
epro-qa.bestbuybusiness.com
stscld-app-ext-east.prod.browse.bestbuy.com
pl.bestbuy.com
suggest-web-east-int.stage.browse.bestbuy.com
gglepaidm-app-int-east.test.browse.bestbuy.com
mytlc.bestbuy.com
zkagentsvc-app-int-east.test.browse.bestbuy.com

Certificate

The complete raw certificate details for jwaller-app-int-east.test.cgraph.bestbuy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhjWc20Z4zA7gLJSDi6g
+dvB8WnrWawetNG/z68Dap/AsX+i7ba1R6HwBVXA8zDbmFgleOgV8LPMSFwQoZ1e
xeq4xV3CBYteErFBsP90MBJSH4fdZh/+sfnQAZWCMEPpvobMqPgRwRopzx6wZW/r
PGiyVnGWxGZM9YvqqdfmxYERIo/ZEav+vHELUtzSgAcSKi0sj0ix48rZ6u3tqSVz
Ni5Ae3kRn23w2qNCALNrdLoSvtT0mxeODScPTjI4QONt3OJzL20OVPOVqzcgjMsP
IV7HYGmE5VRTuuDE4/wPTJwM3+mvycXg9EMeO4073KrDQFHLcNAP+/w6dx1to3Mr
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5595545543103208830009933809979527608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jwaller-app-int-east.test.cgraph.bestbuy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21977712989841012815784022712000111501179007178903254318774559353276069530154547917635317806132206312971763316507285379263104301391587235580482602715605848081343833909435670743701750848291188259950460230817531137901022264837384337675694209227674327922261913503789593641120884242522893439403631395387074866210337557461772006177961229784134963890038172445005042061396068640196512263588229648790393465321772392565266169633287671980936252691219842456363358015347230233867585640125732044066795008757249332946001073739208523083221655533776825581262498744320300674794566305266080451025879364717077160091502292834278742108973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3b304625c1339eecac65ec6f8e1fbf369d60237
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwaller-app-int-east.test.cgraph.bestbuy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a3bd6fda3eecd3b034ac76bb024e3bbad443423a2e65d5c5808e4a916fbd59ea2ed5933aed121c25910d3605c5b154fc018ed438125052ceaf3dc156f8775e3cd6c4cc7f8503c2876fd54d41287bfc48522778cacb681f5ca34a7120e6006683d4d189e5a4d855e5743c6192ea10a0c8f681a0cd6eda0ae0344ff21fd216d007f57f2dc6465b3e0a7abbcf223bb97f355095c34bab19375c3acbc0dc2c0a8248b7d829eb302704b487bdfb8fb22080b299721590843c1f638d194733cf3c3d01acb98db229ae03de414472be9925ccfc1e35814653eab8507eb52edcfedfa003ee319d96653352ff4b9e3de299e948d05cce03e713b319d8d35e13fecdcaaed