dockerhub.ext.datg-abc-spark-west.us.seabc.go.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:3a:31:f5:36:a4:6d:34:1b:a5:47:be:69:74:ff:d7 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dockerhub.ext.datg-abc-spark-west.us.seabc.go.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:3a:31:f5:36:a4:6d:34:1b:a5:47:be:69:74:ff:d7
Serial Number (int): 2960622475246216738814701554571214807
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 87:1f:90:08:28:78:a2:57:e2:7e:25:99:a1:6e:14:58:4f:2b:af:42
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a8:5a:ea:4a:7e:81:f8:49:c3:e5:d6:01:65:5f:fc:52:8b:62:6f:55
Fingerprint (sha256): 03:ac:01:0a:68:e3:7a:c6:8b:3e:e3:1b:49:59:3a:f1:15:2c:91:d3:3f:40:37:f9:e3:e2:88:ad:c4:56:f7:c6

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dockerhub.ext.datg-abc-spark-west.us.seabc.go.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dockerhub.ext.datg-abc-spark-west.us.seabc.go.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dockerhub.ext.datg-abc-spark-west.us.seabc.go.com
dockerhub.int.datg-abc-spark-west.us.seabc.go.com

Other certificates including the domain name go.com

(limited to 100 certificates)
disneymovieclub.go.com
approvals.qa.pcm.go.com
video.disney.com
www.aws.espn.com
auth-mock.qa.pcm.go.com
DISNEYCRUISE.RESERVATIONS.DISNEY.GO.COM
forumadmin.disney.go.com
dns-vetting1-jeffg-noah.map.fastly.net
media.abcfamily.go.com
tredir.stage.go.com
disneyphotopass.go.com
dns-vetting1-mims-pawel.map.fastly.net
video.disney.com
espndeportes.espn.go.com
wdpromedia.disney.go.com
editions.geo.hosted.abcotvs.com
disneyland.disney.go.com
sslcertificate3.queue-it.net
beachresorts-sl.disney.go.com
r.abc.go.com
tredire-cloud.go.com
dns-vetting1-mims-pawel.map.fastly.net
mediakit.go.com
stg-unid.go.com
proxy.espn.go.com
cwc.dsi.go.com
disneyvacationaccount.disney.go.com
disneycruise.disney.go.com
room.oscar.go.com
abcnewsstore.go.com
m.disneyland.disney.go.com
v2.shared.global.fastly.net
tredire.perf.go.com
otvresponder.gns.go.com
r2.shared.global.fastly.net
mydcastqa.go.com
tredir.ppe.go.com
paymenthandlerstaging.go.com
reg.espn.go.com
vault-east.dev.ci.go.com
latest.disneyland.disney.go.com
disneyworld.disney.go.com
v2.shared.global.fastly.net
googlenow.abcnews.go.com
resorts.disney.go.com
api.rdf.watchabc.go.com
iregcs.go.com
qa.registerdisney.go.com
dns-vetting1-mims-pawel.map.fastly.net
api.go.com
disneycruise.disney.go.com
disneymovierewards.go.com
quickquote.disney.go.com
optout.go.com
abcnews-react-stage.aws.seabcnews.go.com
cms.disney.go.com
disneygoldenoak-sl.disney.go.com
event-registration-qa01.disneyparks.disney.go.com
assets.espncdn.com
preview.ddb.go.com
*.wdprdvc.segopub.engsvc.go.com
stg.n7.vp2.watchtvplus.go.com
api.dsitpr.go.com
r2.shared.global.fastly.net
stg.authorization.go.com
authorization.go.com
fg-vault.qa.pcm.go.com
stg.api.sweepstakes.go.com
dns-vetting1k.map.fastly.net
cdn.secure.espn.go.com
abcsports.go.com
sandbox.dev.ci.go.com
static.aws.abcfamily.go.com
secure.cdn.media.oscar.abc.com
wdprolt30-service.disney.go.com
gma-newsletter-tool.aws.seabcnews.go.com
api.mock.watchabc.go.com
api.disneymovieclub.go.com
video.disney.com
s.abcnews.com
r2.shared.global.fastly.net
test.gatekeeper.us-abc.symphony.edgedatg.com
env1.nge.api.go.com
*.api.contents.watchabc.go.com
load.disneycruise.wdprapps.disney.com
olaf-api.east.prod.us.seabc.go.com
abcsports.go.com
aglobal.go.com
disneymovieclub.go.com
queue.disneymovieclub.go.com
test.gatekeeper.us-abc.symphony.edgedatg.com
freeform.go.com
www.what-is-your-revolution.abc.go.com
dockerhub.ext.datg-abc-spark-west.us.seabc.go.com
watch.video.api.qa.espn.com
dns-vetting1-jeffg-noah.map.fastly.net
*.gatekeeper.us-abc.symphony.edgedatg.com
dwtsvote.abc.go.com
parksandresorts.wdpromedia-le.disney.go.com
disneyweddings.disney.go.com

Certificate

The complete raw certificate details for dockerhub.ext.datg-abc-spark-west.us.seabc.go.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys7gNBnH5OfDyszbo93D
qwPjvx1P75UhYKElL69qJ98PlmjtiqOZ/q6kK9UmHw/0KVXNnsKYyKOaoILdt24F
YebNy4+hBb7x+6kLQ5j33yietXBUXBPGi1ZCl58YZrKCzr8H8Qb4fNCdmWOOrJRB
ktCWHUzL3QtqbbnjOs4UQW+9lfwOd+a3jONIw5pp9Wo0Bd7IHw8gPZoXbxO7Fsxz
c5JMIw+Dc/6ETgjx+8qrGEApfPdssEYQozAqCQ9wjFnsIxSsaqibzZ6g/6dXgUyP
24zKw8nt9kiD32o3H/QLgPEB+RPzRU2QBE56/SuzZTPzuU1Dsjl7bowmjSWooXak
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2960622475246216738814701554571214807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dockerhub.ext.datg-abc-spark-west.us.seabc.go.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25602151859778642937807216256069065487089359877482675766703805630819705280734791038310143916399021358923423973338496511668585043714114993447032494867479760703159910368562943824805177724718546362752792307440006408827033872007492891203770117343032123931055467357820429263048567515667295363648984122389455557359186532778354661594319644144581046051289850031187395999675792350170494948348438126674205702958151348466969925655770214644656030352324052166298096002597834133634649937909042571943810235601531313669110921913217973746742163373714937117364579291119086406826491953279684543005978434626163234367892008971610478781453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							871f90082878a257e27e2599a16e14584f2baf42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dockerhub.ext.datg-abc-spark-west.us.seabc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dockerhub.int.datg-abc-spark-west.us.seabc.go.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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