polling.turningtechnologies.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:01:6b:97:b6:2e:19:30:5c:f1:dd:71:9b:fd:5a:dd was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=polling.turningtechnologies.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:01:6b:97:b6:2e:19:30:5c:f1:dd:71:9b:fd:5a:dd
Serial Number (int): 14628882488154741138710987470467324637
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4d:52:07:92:62:f2:61:bf:46:37:11:a8:15:ea:2d:53:92:75:b1:ee
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): aa:70:0a:a4:c2:2b:7f:81:68:00:87:ce:ff:0f:cf:e7:77:a2:40:61
Fingerprint (sha256): 03:a3:8a:aa:14:6c:07:87:3b:7d:91:b8:d8:4d:0a:19:67:16:e2:3c:7f:d2:ed:07:e7:b5:bf:fa:65:f5:41:cd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate polling.turningtechnologies.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for polling.turningtechnologies.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

polling.turningtechnologies.com
polling.turningtechnologiessg.net
polling.turningtechnologies.eu
cpsonlinehe.einstruction.com
examview.com
analytics.test.turningtechnologies.com
analytics.dev.turningtechnologies.com

Other certificates including the domain name turningtechnologies.com

(limited to 100 certificates)
uwgb.turningtechnologies.com
polling.turningtechnologies.com
ithelpdesk.turningtechnologies.com
student.turningtechnologies.com
rebates.turningtechnologies.com
ucmercedtest.turningtechnologies.com
laurentian.turningtechnologies.com
jira-service-management.status.atlassian.com
utm.turningtechnologies.com
jira-service-management.status.atlassian.com
web-store-consumer.turningtechnologies.com
gradebook.dev.turningtechnologies.com
uww.turningtechnologies.com
account-api.turningtechnologies.com
devryu.turningtechnologies.com
rebates.turningtechnologies.com
signup.turningtechnologies.com
polling.turningtechnologies.com
jira-service-management.status.atlassian.com
polling.turningtechnologies.com
polling.turningtechnologies.com
kingstontest.turningtechnologies.com
jira-service-management.status.atlassian.com
content.turningtechnologies.com
auc.turningtechnologies.com
blinn.turningtechnologies.com
oregonstate.turningtechnologies.com
weatherfordtest.turningtechnologies.com
saintmarys.turningtechnologies.com
admin-dojo360.turningtechnologies.com
polling.turningtechnologies.com
jira-service-management.status.atlassian.com
api.turningtechnologies.com
jira-service-management.status.atlassian.com
student.turningtechnologies.com
lms-integration.turningtechnologies.com
wilkes.turningtechnologies.com
assets-dojo360.turningtechnologies.com
ursinus.turningtechnologies.com
store-api.turningtechnologies.com
store.turningtechnologies.com
villanova.turningtechnologies.com
www.turningtechnologies.com
kingstontest.turningtechnologies.com
bolt.turningtechnologies.com
sni.cloudflaressl.com
uthscsa.turningtechnologies.com
user-server-consumer.turningtechnologies.com
uga.turningtechnologies.com
account.turningtechnologies.com
pgnotification.turningtechnologies.com
calu.turningtechnologies.com
turningtechnologies.com
sakai.turningtechnologies.com
go.turningtechnologies.com
knowbly-main-api.turningtechnologies.com
esu.turningtechnologies.com
connect.turningtechnologies.com
briarcliff.turningtechnologies.com
npm.turningtechnologies.com
murraystate.turningtechnologies.com
dartmouth.turningtechnologies.com
www.turningtechnologies.com
content.turningtechnologies.com
admin.turningtechnologies.com
alfredu.turningtechnologies.com
polling.turningtechnologiessg.net
bscc.turningtechnologies.com
uw.turningtechnologies.com
msun.turningtechnologies.com
uncc.turningtechnologies.com
ucdenver.turningtechnologies.com
responseware.turningtechnologies.com
results.turningtechnologies.com
polling.turningtechnologies.com
csun.turningtechnologies.com
neo.turningtechnologies.com
iu.turningtechnologies.com
webreg.turningtechnologies.com
templeu.turningtechnologies.com
store.turningtechnologies.com
jira-service-management.status.atlassian.com
email.turningtechnologies.com
ttcu.turningtechnologies.com
jira-service-management.status.atlassian.com
sni.cloudflaressl.com
jira.turningtechnologies.com
scheduling.turningtechnologies.com
build.turningtechnologies.com
upenn.turningtechnologies.com
content.turningtechnologies.com
umc.turningtechnologies.com
uiowa.turningtechnologies.com
uga.turningtechnologies.com
turningtechnologies.com
sni.cloudflaressl.com
uwm.turningtechnologies.com
uakron.turningtechnologies.com
uiowa.turningtechnologies.com
rebates.turningtechnologies.com

Certificate

The complete raw certificate details for polling.turningtechnologies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKZpTE+LJjgxlyfiI6mj
Q9BPep+RsQxqPbN2tSzO6dNuFjauJS+0pD259Lt4blwQfFfOfR+oXbw5dV5ijdAE
1RJc5WyLUnaxpJf+WupeuFnfj92P/hoeTKdRXzXr4zWUbLq2gX/xJjbvqSGMTV2B
KqRGqxd3YDTOqEhco/EBofvxZBGdgqpKMQhXbwqWLDyLWzRKdY3id4toqbfqQjWe
ja+8MPbtqn2g74I5Qouw0DcRwCElfG83OcKAMiHy0sScd5b5tSPIvOEARyqp1QSj
eX7Cw/xsdqnkrkw3nKhOWX74ji8zprea7DtnsPGvD1RbqfhGknyY6jSTSklu8l+d
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14628882488154741138710987470467324637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'polling.turningtechnologies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19270282835493927450873399844439413267063567447984082312890932161857599592071924969288528797242073185419853670887351502129751467014413609287775624720810073138377322595578418595198953776857508348359885369405666071784030757412982238985021856749050910930996720338213637487190685890675130360854125908243257759152453477622733413258881315775681949551435018402615654721306153072942590758559528693939236053857397602476177024258610583332309733991472479064350429069496017586822884801570814125261728997913226134713615964505000210034439883586581717623615812268748758917161755797776461943637693377240994429041235022934687357050331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d52079262f261bf463711a815ea2d539275b1ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (226 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polling.turningtechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polling.turningtechnologiessg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polling.turningtechnologies.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpsonlinehe.einstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.test.turningtechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.dev.turningtechnologies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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